CVE-2024-11172: Denial of Service in danny-avila/librechat
A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware checkBan is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This issue is fixed in version 0.7.6.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11172?
The severity of CVE-2024-11172 is classified as a denial of service vulnerability that allows unauthenticated attackers to disrupt service.
How do I fix CVE-2024-11172?
To fix CVE-2024-11172, update the librechat version to at least 0.7.6, ensuring proper error handling for the `checkBan` middleware.
Who is affected by CVE-2024-11172?
CVE-2024-11172 affects users of the danny-avila/librechat software version prior to 0.7.6.
What components are involved in CVE-2024-11172?
CVE-2024-11172 involves the `checkBan` middleware in the danny-avila/librechat application.
Can CVE-2024-11172 be exploited remotely?
Yes, CVE-2024-11172 can be exploited remotely by sending a crafted payload to the vulnerable server.