The vulnerability in the checkBan.js script of the LibreChat artificial intelligence-based platform allows a violator to trigger a service denial.

The vulnerability of the checkBan.js script on the LibreChat AI-based platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

multer(file upload middleware in express) misused, lead to remote code execution

Description Librechat use multer to handle multi-part file upload. multer library will deal with '../' kind of path traversal, then let the programmer decide the actual filename, then join the path to write the upload the file. this means, if '../' is provided by the user of librechat, multer wil...

Not limitation of upload file size, lead to server crash

Description librechat use multer, which is a middleware which handles streaming multipart fileupload. If use in memory storagemulter by default, can do not limit the upload file size, when handling big file, server will crash for out of memory. Attacker with no privilege can exploit this. Proof o...

unhandled exception caused server crash

Description in javascript express framework, if async router handler throw an exception, the whole server will crash. In librechat, some API, when leading with some malformed input, will have uncaught exception. This will lead to server crash, thus a full denial of service. Mind that although thi...

Allowing execution user provided regexp, lead to Redos

Description librechat have a functionality of uploading chatgpt chat log. when processing the log, following code is executed: const pattern = new RegExp \u3010$citation.metadata.extra.citedmessageidx\u2020.+?\u3011, 'g', ; const replacement = $citation.metadata.title; messageText =...

vulnerability-disclosures

REA Group Security Vulnerability Disclosures REA Groupht...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

PT-2024-29525

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.7.4-rc1 Description The issue is related to incorrect access control for message updates. Recommendations For versions prior to 0.7.4-rc1, at the moment, there is no information about a newer version that contains...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41704: Improper Limitation of a Pathname to a Restricted Directory

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41703: Improper Access Control

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41704

Technical details about CVE-2024-41704 are not provided in the connected documents; monitor for updates.

CVE-2024-41703

LibreChat up to version 0.7.4-rc1 has an incorrect access control for message updates. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the same description. The CVSS-based impact is listed as critical in NVD (high confidentiality, integrity, and availability im...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

LibreChat Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible LibreChat instance on the target application. LibreChat is an enhanced open-source ChatGPT clone. This detection is included in the AI and LLM category. No source data...