CVE-2024-10713
HIGHszad670401/hyperlpr 3.0 - Unauthenticated Denial of Service via Malformed Multipart Boundary
Title source: llmDescription
A vulnerability in szad670401/hyperlpr v3.0 allows for a Denial of Service (DoS) attack. The server fails to handle excessive characters appended to the end of multipart boundaries, regardless of the character used. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, leading to excessive resource consumption and a complete denial of service for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue.
References (1)
Core 1
Core References
Exploit, Third Party Advisory
https://huntr.com/bounties/d5404069-95b3-40e0-a7a4-c3a183d861b0
Scores
CVSS v3
7.5
EPSS
0.0023
EPSS Percentile
46.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-770
Status
published
Products (2)
pypi/hyperlpr3
0PyPI
szad670401/szad670401/hyperlpr
unspecified - latest
Published
Mar 20, 2025
Tracked Since
Feb 18, 2026