Denial of Service Vulnerability in ChuanhuChatGPT by Gradio

CVE-2024-10650

What is CVE-2024-10650?

An unauthenticated Denial of Service (DoS) vulnerability exists in ChuanhuChatGPT version 20240918. The flaw allows attackers to exploit the service by transmitting large data payloads via malformed multipart boundaries. Even after rectifications for earlier vulnerabilities, this particular issue remains, as attackers can send data in structured groups of 10 characters across multiple lines. This manipulation can lead to significant service disruption, compelling the system to process excessive data input, ultimately resulting in prolonged unavailability of the application.

References