MEDIUM
Denial of Service in gaizhenbiao/chuanhuchatgpt
Published Mar 20, 2025
6.5
MEDIUMCVSS 3.0
EPSS 0.59%
Description
A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<=latest
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Gaizhenbiao | Gaizhenbiao/chuanhuchatgpt | n/a |
|
- 20240914
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6823 Advisory
- https://huntr.com/bounties/c89a1dfd-a733-41b3-af20-6ef6024361eb ExploitThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-6823 | Advisory | |
| https://huntr.com/bounties/c89a1dfd-a733-41b3-af20-6ef6024361eb | ExploitThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner @huntr_ai
Published Mar 20, 2025
Updated Mar 20, 2025
Reserved Jan 3, 2025
Link CVE-2025-0191
CISA Vulnrichment
Updated Mar 20, 2025
ENISA EUVD
EUVD-2025-6823 Assigner @huntr_ai
Published Mar 20, 2025
Updated Mar 20, 2025
Exploited since n/a
Link EUVD-2025-6823