What is CVE-2024-7807?

CVE-2024-7807 is a high-severity vulnerability in Gaizhenbiao Chuanhuchatgpt, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2024-10-29.

How severe is CVE-2024-7807?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Gaizhenbiao Chuanhuchatgpt

CVE-2024-7807

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering ChuanhuChatGPT inaccessible. This uncontrolled resource consumption can lead to prolonged unavailability of the service, disrupting operations and causing potential data inaccessibility and loss of productivity.

EPSS: 0.006 (45.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Gaizhenbiao Chuanhuchatgpt — versions 20240628
Gaizhenbiao Gaizhenbiao/chuanhuchatgpt — versions unspecified

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

security@huntr.dev (Exploit)
security@huntr.dev (Patch)

Frequently asked questions

What is CVE-2024-7807?: CVE-2024-7807 is a high-severity vulnerability in Gaizhenbiao Chuanhuchatgpt, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2024-10-29.
How severe is CVE-2024-7807?: High severity. CVSS v3 base score is 7.5 out of 10.