Denial of Service via multipart boundary in ZenML (CVE-2024-9340)
A vulnerability in ZenML allowed remote attackers to cause a denial of service by sending requests with large multipart boundaries. The issue was fixed by implementing a maximum request body size limit.
What happened
A denial of service vulnerability in ZenML was identified related to multipart request boundaries.
Reported impact
Remote attackers could cause a denial of service by sending requests with large multipart boundaries.
Index analysis
The vulnerability was addressed by implementing a maximum request body size limit of 256 MB in the server configuration.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.