description: Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by using REST HTTP requests with label_selectors on multiple V3 endpoints by generating an enormous SQL query.
problem types: CWE-400: Uncontrolled Resource Consumption
affected:
{
product: Cloud Foundry Cloud Controller
vendor: n/a
versions:
status: affected, version: Cloud Foundry Cloud Controller versions prior to 1.118.0
}