Denial of Service Vulnerability in Binary-Husky's GPT Academic Repository

CVE-2024-12387

What is CVE-2024-12387?

A vulnerability in the Binary-Husky GPT Academic repository operates under insufficient input validation, permitting attackers to upload a malicious zip file crafted as a zip bomb. When this file is processed, it triggers an out-of-memory condition on the server as it decompresses the excessively large payload, leading to a complete server crash. This issue underscores the importance of robust file upload sanitization practices to mitigate such risks.

References