Beveiligingsadvies

CVE-2026-50273

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-17 18:01:14

Laatst bijgewerkt 2026-07-17 19:46:45

Toegewezen door GitHub_M

CVSS-score 7.5

Status PUBLISHED

Beschrijving

Datadog .NET Tracer is a client library for Datadog APM for .NET applications. Prior to 3.43.0, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES on extraction, allowing a remote unauthenticated attacker to send a baggage header with many comma-separated key-value pairs or one very large value and cause unbounded CPU and memory consumption in services with baggage propagation enabled. This issue is fixed in version 3.43.0.

← Alle CVE's bekijken Bekijk op cve.org ↗