Denial of Service Vulnerability in privategpt by imartinez

CVE-2024-12063

Summary

A vulnerability exists in the file upload feature of privategpt version v0.6.2, arising from improper handling of form-data containing excessively large filenames. This flaw can be exploited by an attacker crafting a specially designed payload, leading to a denial of service condition. When the server receives the exploit, it may become overwhelmed, resulting in inaccessibility for legitimate users and disrupting operations.

References