CVE-2024-10912
CVE-2024-10912 · Denial of Service in lm-sys/fastchat
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
A Denial of Service (DoS) vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.
CVSS 7.5 · Alta · EPSS 0,6%
- Publicación
- Actualización
Pila tecnológica: python
Productos y versiones afectados
lm-sys/fastchat
- Versiones
- ≥ unspecified, ≤ latest: Afectada (custom)
Sin corrección publicada
fschat PyPI
- Versiones
- 0.1.1
- 0.1.10
- 0.1.2
- 0.1.3
- 0.1.4
- 0.1.5
- 0.1.6
- 0.1.7
- 0.1.8
- 0.1.9
- 0.2.0
- 0.2.1
- 0.2.10
- 0.2.11
- 0.2.12
- 0.2.13
- 0.2.14
- 0.2.15
- 0.2.16
- 0.2.17
- 0.2.18
- 0.2.2
- 0.2.20
- 0.2.21
- 0.2.23
- 0.2.24
- 0.2.26
- 0.2.27
- 0.2.28
- 0.2.29
- 0.2.3
- 0.2.30
- 0.2.31
- 0.2.32
- 0.2.33
- 0.2.34
- 0.2.35
- 0.2.36
- 0.2.4
- 0.2.5
- 0.2.6
- 0.2.7
- 0.2.8
- 0.2.9
- Intervalos de versiones afectados
- ECOSYSTEM: ≤ 0.2.36
Sin corrección publicada