CVE-2024-12759

In bentoml/bentoml version 1.3.9, the /login endpoint of the newly integrated Gradio app is vulnerable to a Denial of Service DoS attack. This vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. The server continuously...

CVE-2024-12759

...

CVE-2024-12759

CVE-2024-12759 is a duplicate of CVE-2024-8966. Connected records describe a DoS in gradio-app/gradio via the file upload multipart boundary handling in Gradio (version @gradio/[email protected]), where appending characters to the boundary causes unbounded processing and service downtime. Impact is un...

CVE-2024-12759

...