PT-2025-12119 · Unknown · Imartinez/Privategpt

Published 2025-03-20 · Updated 2025-07-17 · CVE-2024-12063

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions imartinez/privategpt version v0.6.2

Description A Denial of Service (DoS) vulnerability exists in the file upload feature. The issue is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.

Recommendations For imartinez/privategpt version v0.6.2, implement stricter validation and sanitization of filenames during the file upload process to prevent excessively large filenames from being processed.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-12063

Affected Products

Imartinez/Privategpt

References · 5

• 🔥 https://huntr.com/bounties/7db0091f-cb53-4cde-aad7-7ce491dfd8d9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-12063 · Security Note
• https://osv.dev/vulnerability/CVE-2024-12063 · Vendor Advisory
• https://twitter.com/CVEnew/status/1902670969853858271 · Twitter Post
• https://t.me/cvenotify/129315 · Telegram Post