Denial of Service Vulnerability in binary-husky/gpt_academic by Binary Husky

CVE-2024-10714

What is CVE-2024-10714?

A vulnerability in binary-husky/gpt_academic version 3.83 can be exploited by attackers to trigger a Denial of Service (DoS) condition. This occurs during the file upload process when excessive characters are appended to the end of a multipart boundary. The server, in an effort to process the incoming data, gets overwhelmed by the numerous characters, leading it to issue repeated warnings, specifically the message: 'multipart.multipart Consuming a byte '0x2d' in end state'. As a result, the application may become completely inaccessible, disrupting normal operations.

References