CVE-2024-10912
CVSS 3.0 Score 7.5 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 400
Summary
CVE-2024-10912 is a Denial of Service (DoS) vulnerability affecting the file upload feature of lm-sys/fastchat version 0.2.36. The issue arises due to the application's inability to handle form-data with overly large filenames in file upload requests. An attacker can potentially exploit this flaw by sending a specially crafted payload with an excessively long filename, causing the server to become overwhelmed and unresponsive, making the service unavailable to legitimate users.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.