Denial of Service Vulnerability in ChuanhuChatGPT by Gaizhenbiao

CVE-2024-7807

What is CVE-2024-7807?

A vulnerability in ChuanhuChatGPT allows for a Denial of Service (DOS) attack through file uploads. If an attacker appends an excessive number of characters to the end of a multipart boundary during a file upload, the system enters a state of continuous processing for each character, causing the application to become unresponsive. This uncontrolled consumption of system resources can disrupt service availability, leading to potential data inaccessibility and significant loss of productivity for users.

References