CyberRota Analysis
AI-GeneratedA vulnerability in the search-v2-api allows unauthenticated attackers to exploit the system by sending requests with unique random bearer tokens, which creates permanent entries in the unbounded tokenReviews cache. This improper cache management can lead to memory exhaustion of the search-api pod, resulting in a Denial of Service (DoS) condition. Organizations utilizing this API should prioritize remediation to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random bearer tokens. Each unique token creates a permanent entry in the unbounded tokenReviews cache, which is not properly cleared. This can lead to memory exhaustion of the search-api pod, resulting in a Denial of Service (DoS).