CVE-2024-23826

CVE-2024-23826 is a denial-of-service vulnerability affecting the spbu_se_site website of St. Petersburg State University's Department of System Programming. Authenticated users could trigger a server-side DoS on Windows by uploading an avatar with an excessively long Unicode filename, exploiting a lack of filename length limitation and costly Unicode normalization. This medium-severity vulnerability (CVSS 5.7) requires user interaction and low privileges, potentially leading to high availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.