Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-11169

Unhandled Exception Leading to Server Crash in danny-avila/librechat

Description

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request, causing the server to crash. The vulnerability is fixed in version 0.7.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

danny-avila danny-avila/librechat

  • unspecified to < 0.7.6affected

References