CVE-2024-9229highCWE-770

CVE-2024-9229: falha de alta gravidade em stangirard/quivr

Denial of Service (DoS) via Multipart Boundary in stangirard/quivr

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar stangirard/quivr+ Monitorar quivr-core

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.8%
A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads to the server continuously processing each character, rendering the service unavailable and impacting all users.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
stangirard · stangirard/quivr
CVEs relacionadas — stangirard/quivr

No mesmo produto, das mais perigosas para as menos.

CVE-2024-6583MEDIUMPath Traversal in stangirard/quivrEPSS 0.6%CVE-2024-4851HIGHSSRF Vulnerability in stangirard/quivrEPSS 0.6%CVE-2024-5885HIGHServer-Side Request Forgery (SSRF) in stangirard/quivrEPSS 0.6%CVE-2024-6229MEDIUMStored XSS in stangirard/quivrEPSS 0.3%