CVE-2025-30188CWE-400denial-of-service

CVE-2025-30188

High · published October 31, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

⚡ Unintentional or malicious API requests could flood your caches, leading to a shutdown of your web frontend! Think of your cache like a busy restaurant's kitchen. If too many orders flood in at once, the chefs can’t keep up, and some essential dishes might just get tossed aside, leaving diners hungry and waiting! In the worst-case scenario, your web component could become unavailable, disrupting services and causing frustration for users. If crucial data gets evicted from your cache, it could lead to performance issues and downtimes that impact your business operations significantly. Yikes!

Put simply

Think of your cache like a busy restaurant's kitchen. If too many orders flood in at once, the chefs can’t keep up, and some essential dishes might just get tossed aside, leaving diners hungry and waiting! This vulnerability allows excessive data manipulation via API requests, leading to cache eviction that affects the availability of the web frontend. Essentially, it disrupts the normal flow of data management, which is critical for smooth operation.

What to do

In the worst-case scenario, your web component could become unavailable, disrupting services and causing frustration for users. If crucial data gets evicted from your cache, it could lead to performance issues and downtimes that impact your business operations significantly. Yikes! To counter this, deploy the provided updates and patch releases immediately. Monitor your API requests to ensure they remain within expected limits to prevent unwanted cache flooding. Staying proactive is key here! You’ve got this! Fix the issue at hand and keep your web component running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-10-31T13:15Z
References (1)
EPSS history
Timeline
  • 31 OCT 08:54Z
    Malicious or unintentional API requests can be used to add significant amount of data to caches
    cvelistv5