Description

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering ChuanhuChatGPT inaccessible. This uncontrolled resource consumption can lead to prolonged unavailability of the service, disrupting operations and causing potential data inaccessibility and loss of productivity.

INFO

Published Date :

2024-10-29T12:48:16.107Z

Last Modified :

2025-01-09T17:13:30.519Z

Source :

@huntr_ai
AFFECTED PRODUCTS

The following products are affected by CVE-2024-7807 vulnerability.

Vendors Products
Gaizhenbiao
  • Chuanhuchatgpt
  • Gaizhenbiao\/chuanhuchatgpt
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-7807.

URL Resource
https://github.com/gaizhenbiao/chuanhuchatgpt/commit/919222d285d73b9dcd71fb34de379eef8c90d175 cve-icon cve-icon
https://huntr.com/bounties/db67276d-36ee-4487-9165-b621c67ef8a3 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact