Unauthenticated Denial of Service Vulnerability in SuperAGI by SuperAGI Technologies

CVE-2024-9437

What is CVE-2024-9437?

SuperAGI version v0.0.14 has a vulnerability that allows unauthenticated attackers to exploit the resource upload request. By appending specific characters to the end of a multipart boundary in an HTTP request, the server enters an infinite processing loop, consuming excessive resources. This leads to service unavailability for all users without requiring any authentication or user interaction, making it particularly dangerous.

References