DoS via Large Filename in File Upload
A Denial of Service (DoS) vulnerability was discovered in the file upload feature of FastChat version v0.2.36. The vulnerability allows an attacker to overwhelm the server by sending a file with an excessively large filename, leading to unavailability for legitimate users. The issue has not yet been patched.
Available publicly on Jan 07 2025
Remediation Steps
- Implement filename length validation to reject excessively large filenames.
- Apply rate limiting to the file upload endpoint to mitigate the impact of such attacks.
- Monitor and log unusual activity on the file upload endpoint to detect potential exploitation attempts.
- Update the FastChat software to include these mitigations once a patch is released.
Patch Details
- Fixed Version: N/A
- Patch Commit: N/A
Want more out of Sightline?
Sightline offers even more for premium customers
Go Premium
We have - related security advisories that are available with Sightline Premium.