CVE-2024-10650

Summary

CVE-2024-10650 is a newly identified Denial of Service (DoS) vulnerability in ChuanhuChatGPT version 20240918. This issue allows an unauthenticated attacker to send large data payloads using a multipart boundary, causing the system to continuously process the characters. Although a patch was implemented for a related vulnerability (CVE-2024-7807), this flaw can still be exploited by sending data in groups with 10 characters in a line, resulting in prolonged unavailability of the service. The exploitation now requires low privilege if authentication is enabled due to a recent version upgrade in Gradio.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.