CVE-2024-11172

{"id": "CVE-2024-11172", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-03-20T10:15:24.550", "references": [{"url": "https://github.com/danny-avila/librechat/commit/976784c01fa4cce00d4c2941801d56aed375c21b", "tags": ["Patch"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/c76a7ee3-2e26-45a0-8940-21c749592105", "tags": ["Exploit", "Third Party Advisory"], "source": "security@huntr.dev"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware `checkBan` is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This issue is fixed in version 0.7.6."}, {"lang": "es", "value": "Una vulnerabilidad en la versi\u00f3n git a1647d7 de danny-avila/librechat permite a un atacante no autenticado provocar una denegaci\u00f3n de servicio mediante el env\u00edo de un payload manipulado al servidor. El middleware `checkBan` no est\u00e1 rodeado por un bloque try-catch, y una excepci\u00f3n no controlada provocar\u00e1 el bloqueo del servidor. Este problema se ha corregido en la versi\u00f3n 0.7.6."}], "lastModified": "2025-07-15T16:44:30.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:librechat:librechat:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E179B3DF-58FF-4973-9462-0DACCC77DC7A", "versionEndExcluding": "0.7.6"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}