CVE-2024-8966

CVE-2024-8966 is a Denial of Service (DoS) vulnerability affecting gradio-app/gradio version @gradio/[email protected]. An unauthenticated attacker can exploit a flaw in the file upload process by appending numerous characters to a multipart boundary, leading to continuous processing and system warnings. This can render Gradio inaccessible, causing significant service disruption. Rated 7.5 HIGH on CVSS, the attack is network-based with low complexity and no user interaction required, resulting in high availability impact. There is no evidence of active exploitation, public exploit code, or inclusion in the KEV catalog, though it has garnered some community discussion.