CVE-2024-21319 – Microsoft Identity Denial of service vulnerability

https://notcve.org/view.php?id=CVE-2024-21319

Microsoft Identity Denial of service vulnerability Vulnerabilidad de denegación de servicio de identidad de Microsoft A Denial of Service vulnerability was found in .NET Core project templates that utilize JWT-based authentication tokens. This issue may allow an unauthenticated client to consume arbitrarily large amounts of server memory, potentially triggering an out-of-memory condition on the server and making the server no longer able to respond to legitimate requests. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21319 https://access.redhat.com/security/cve/CVE-2024-21319 https://bugzilla.redhat.com/show_bug.cgi?id=2257566 • CWE-20: Improper Input Validation CWE-400: Uncontrolled Resource Consumption •