Go.Opentelemetry.Io Contrib Instrumentation Net Http Httptrace Otelhttptrace vulnerabilities

1 known vulnerability affecting go.opentelemetry.io/contrib_instrumentation_net_http_httptrace_otelhttptrace.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2023-45142HIGH≥ 0, < 0.44.02023-10-16

CVE-2023-45142 [HIGH] CWE-770 OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics ### Summary This handler wrapper https://github.com/open-telemetry/opentelemetry-go-contrib/blob/5f7e6ad5a49b45df45f61a1deb29d7f1158032df/instrumentation/net/http/otelhttp/handler.go#L63-L65 out of the box adds labels - `http.user_agent` - `http.method` that