CVE-2024-6959

Summary

CVE-2024-6959 is a Denial of Service (DoS) vulnerability affecting version 9.8 of parisneo/lollms-webui. An attacker can exploit this issue by appending an excessive number of characters to the end of a multipart boundary in an audio file upload. As a result, the system becomes overwhelmed, causing the web interface to become unresponsive and inaccessible. The absence of Cross-Site Request Forgery (CSRF) protection worsens the situation by enabling remote exploitation. This vulnerability can result in extended downtime due to service disruption and resource exhaustion.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.