CVE-2024-7807
HIGHgaizhenbiao/chuanhuchatgpt 20240628 - Denial of Service via Multipart Boundary Processing
Title source: llmDescription
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering ChuanhuChatGPT inaccessible. This uncontrolled resource consumption can lead to prolonged unavailability of the service, disrupting operations and causing potential data inaccessibility and loss of productivity.
References (2)
Core 2
Scores
CVSS v3
7.5
EPSS
0.0060
EPSS Percentile
44.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-770
Status
published
Products (1)
gaizhenbiao/chuanhuchatgpt
20240628
Published
Oct 29, 2024
Tracked Since
Feb 18, 2026