漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
ChatterBot has Denial of Service via Database Connection Pool Exhaustion
Vulnerability Description
ChatterBot is a machine learning, conversational dialog engine for creating chat bots. ChatterBot versions up to 1.2.10 are vulnerable to a denial-of-service condition caused by improper database session and connection pool management. Concurrent invocations of the get_response() method can exhaust the underlying SQLAlchemy connection pool, resulting in persistent service unavailability and requiring a manual restart to recover. Version 1.2.11 fixes the issue.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
ChatterBot 资源管理错误漏洞
Vulnerability Description
ChatterBot是Gunther Cox个人开发者的一个用于创建聊天机器人的机器学习对话引擎。 ChatterBot 1.2.10及之前版本存在资源管理错误漏洞,该漏洞源于数据库会话和连接池管理不当,可能导致连接耗尽并引发拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A