CVE-2023-45288

CVE-2023-45288 is a high-severity denial-of-service (DoS) vulnerability affecting HTTP/2 endpoints, allowing an attacker to cause excessive header data processing by sending numerous CONTINUATION frames. This can lead to resource exhaustion, even for requests that will ultimately be rejected. The vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector, low attack complexity, and high availability impact. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media attention, indicating a high potential for future exploitation.