CVE-2023-25151

CVE-2023-25151 is a denial-of-service vulnerability affecting opentelemetry-go-contrib versions prior to 0.39.0. It arises from the http.target attribute in metric measurements including the full request URI, leading to unbounded memory allocation when handling requests with constantly random query strings. With a CVSS score of 7.5 (High), this vulnerability can be exploited remotely with low attack complexity, resulting in a complete loss of availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.