Description
A vulnerability in parisneo/lollms-webui version 9.8 allows for a Denial of Service (DOS) attack when uploading an audio file. If an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering lollms-webui inaccessible. This issue is exacerbated by the lack of Cross-Site Request Forgery (CSRF) protection, enabling remote exploitation. The vulnerability leads to service disruption, resource exhaustion, and extended downtime.
INFO
Published Date :
2024-10-13T12:28:19.491Z
Last Modified :
2024-11-03T18:27:25.639Z
Source :
@huntr_ai
AFFECTED PRODUCTS
The following products are affected by CVE-2024-6959 vulnerability.
| Vendors | Products |
|---|---|
| Lollms |
|
| Parisneo |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-6959.
