漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Denial of Service in lm-sys/fastchat
Vulnerability Description
A Denial of Service (DoS) vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.
CVSS Information
N/A
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
FastChat 资源管理错误漏洞
Vulnerability Description
FastChat是LMSYS的一个用于训练、部署和评估基于大型语言模型的聊天机器人的开放平台。 FastChat 0.2.36版本存在资源管理错误漏洞,该漏洞源于文件上传功能中处理大文件名不当,可能导致拒绝服务攻击。
CVSS Information
N/A
Vulnerability Type
N/A