En bref
- CVE-2025-0191 est une vulnérabilité MOYENNE (CVSS 6.5) touchant chuanhuchatgpt, chuanhuchatgpt (gaizhenbiao).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.60%, plus élevée que 48.9% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
Description
A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.
NVD description
A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free