OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE request with a timestamp that is older than expected.
{
"github_reviewed_at": "2024-05-14T21:30:35Z",
"severity": "MODERATE",
"github_reviewed": true,
"cwe_ids": [
"CWE-119"
],
"nvd_published_at": "2013-08-20T22:55:00Z"
}