CVE-2024-8028

A vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to cause a Denial of Service (DoS) by uploading a file with a malformed multipart boundary. By appending a large number of characters to the end of the multipart boundary, the server continuously processes each character, rendering the application inaccessible. This issue can be exploited by sending a single crafted request, affecting all users on the server.

• CWE-770

• https://huntr.com/bounties/55530ecb-0ac2-4dc1-9527-bf24de594a57

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8022A vulnerability was found in Genexis Tilgin Home Gateway 322…5.3
• CVE-2024-8023A vulnerability classified as critical has been found in chi…9.8
• CVE-2024-8024A CORS misconfiguration vulnerability exists in netease-youd…7.5
• CVE-2024-8025Nikon NEF Codec Thumbnail Provider NRW File Parsing Heap-bas…7.8
• CVE-2024-8026A Cross-Site Request Forgery (CSRF) vulnerability exists in …8.1
• CVE-2024-8027A stored Cross-Site Scripting (XSS) vulnerability exists in …6.1
• CVE-2024-8029An XSS vulnerability was discovered in the upload file(s) pr…6.1
• CVE-2024-8030The Ultimate Store Kit Elementor Addons, Woocommerce Builder…9.8
• CVE-2024-8031The Secure Downloads WordPress plugin before 1.2.3 is vulner…6.5
• CVE-2024-8032The Smooth Gallery Replacement WordPress plugin through 1.0 …6.1
• CVE-2024-8033Inappropriate implementation in WebApp Installs in Google Ch…4.3
• CVE-2024-8034Inappropriate implementation in Custom Tabs in Google Chrome…4.3