kin-openapi is a Go project for handling OpenAPI files. From 0.10.0 until 0.141.0, openapi3filter.convertParseError in openapi3filter/validation_error_encoder.go dereferences e.Parameter.In without checking whether e.Parameter is nil. A malformed non-string scalar field in a multipart/form-data request body produces a nested ParseError with a nil RequestError.Parameter, and applications that render the validation error through openapi3filter.ConvertErrors or ValidationErrorEncoder panic. An unauthenticated client can repeatedly send such requests to deny service when the application lacks a recovery boundary. JSON request bodies and applications that do not use these error-rendering helpers are not affected. This issue is fixed in version 0.141.0.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Migration Toolkit for Applications 8.2 | RedHat | mta/mta-cli-rhel9:1791460004 | * |
| Red Hat OpenShift AI 3.4 | RedHat | rhoai/odh-kserve-agent-rhel9:1791468381 | * |
| Red Hat OpenShift AI 3.4 | RedHat | rhoai/odh-kserve-controller-rhel9:1791468368 | * |
| Red Hat OpenShift AI 3.4 | RedHat | rhoai/odh-kserve-llmisvc-controller-rhel9:1791468484 | * |
| Red Hat OpenShift AI 3.4 | RedHat | rhoai/odh-kserve-router-rhel9:1791468401 | * |
| Red Hat OpenShift AI 3.4 | RedHat | rhoai/odh-mod-arch-eval-hub-rhel9:1791861214 | * |
| Red Hat OpenShift AI 3.4 | RedHat | rhoai/odh-mod-arch-gen-ai-rhel9:1791861479 | * |