CVE-2024-11172

Summary

CVE-2024-11172 is a newly identified vulnerability affecting the librechat server component in the danny-avila/librechat repository. The issue permits unauthenticated attackers to trigger a denial of service condition by sending specially crafted payloads to the server. This occurs due to an omission of a try-catch block surrounding the middleware function `checkBan`. Consequently, an unhandled exception arising from this function results in a server crash. This vulnerability has been rectified in version 0.7.6 of the danny-avila/librechat package.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.