CVE-2024-12063: Denial of Service in imartinez/privategpt

Published Mar 20, 2025

Updated

A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.

Affected Software

2 affected components

imartinez privategpt

Pribai Privategpt=0.6.2

Event History

Mar 20, 2025

CVE Published

via MITRE·10:11 AM

Data Sourced

via MITRE·10:11 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-12063?

CVE-2024-12063 is classified as a Denial of Service (DoS) vulnerability.

How do I fix CVE-2024-12063?

To fix CVE-2024-12063, update the imartinez/privategpt application to the latest version that addresses this vulnerability.

What causes CVE-2024-12063?

CVE-2024-12063 is caused by improper handling of form-data with large filenames in the file upload feature.

Who is affected by CVE-2024-12063?

CVE-2024-12063 affects users of imartinez/privategpt version v0.6.2.

Can CVE-2024-12063 lead to data loss?

CVE-2024-12063 primarily leads to Denial of Service, which may disrupt service availability but does not directly result in data loss.