CVE-2024-12063 - CVE House
Back to Database
Status published High CVE-2024-12063

Denial of Service in imartinez/privategpt

Vulnerability Description

A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-12063

Credits & Attribution

No credits recorded in the NVD database.

References

More from imartinez

View All →
CVE-2024-8029
Stored XSS in imartinez/privategpt
Medium 4.7
CVE-2024-8018
Denial of Service (DOS) in imartinez/privategpt
High 7.5
CVE-2024-5936
Open Redirect in imartinez/privategpt
Medium 4.3
CVE-2024-5935
CSRF Vulnerability in imartinez/privategpt
Medium 5.4
CVE-2024-5186
Server Side Request Forgery (SSRF) in imartinez/privategpt
High 8.3

Affected Vendor

Affected Software

imartinez/privategpt
Vulnerable Versions:
unspecified

Timeline

Official Publish: March 20th, 2025
Last Modified: March 20th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact