Denial of Service Vulnerability in imartinez/privategpt Software

CVE-2024-8018

Summary

A vulnerability in version 0.5.0 of the imartinez/privategpt software enables a Denial of Service (DoS) attack. By uploading a file with an excessively large series of characters appended to the multipart boundary, an attacker can trigger continuous processing by the system. This uncontrolled consumption of resources can render privateGPT inaccessible, leading to extended downtime and potential loss of data access, which disrupts business operations and hampers productivity.

References