CVE-2024-11169CWE-115

Unhandled Exception Leading to Server Crash in danny-avila/librechat

High · published March 20, 2025

CVSS v3.0
7.5
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request, causing the server to crash. The vulnerability is fixed in version 0.7.6.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00935 · 60.5th percentile
Weakness
CWE-115 · Misinterpretation of Input
Published
2025-03-20T10:09Z
EPSS history
Timeline
  • 20 MAR 10:09Z
    Unhandled Exception Leading to Server Crash in danny-avila/librechat
    cvelistv5