CVE-2024-12063highCWE-400

CVE-2024-12063: falha de alta gravidade em imartinez/privategpt

Denial of Service in imartinez/privategpt

Publicada em

Seguir esta CVE+ Monitorar imartinez/privategpt

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.8%
A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
imartinez · imartinez/privategpt
CVEs relacionadas — imartinez/privategpt

No mesmo produto, das mais perigosas para as menos.

CVE-2024-5936MEDIUMOpen Redirect in imartinez/privategptEPSS 30.1%CVE-2024-4343CRITICALPython Command Injection in imartinez/privategptEPSS 2.7%CVE-2024-3403HIGHLocal File Inclusion in imartinez/privategptEPSS 1.1%CVE-2024-8018HIGHDenial of Service (DOS) in imartinez/privategptEPSS 0.6%CVE-2024-8029MEDIUMStored XSS in imartinez/privategptEPSS 0.4%CVE-2024-5186HIGHServer Side Request Forgery (SSRF) in imartinez/privategptEPSS 0.3%