CyberRota Analysis
AI-GeneratedThe vulnerability in stoatchat versions prior to 0.15.0 allows attackers to exploit the proxy endpoint by submitting malicious SVG files with oversized viewBox dimensions, leading to denial of service through memory exhaustion. This can result in significant service disruption as it overwhelms the memory resources of proxy replicas. Organizations using affected versions should prioritize remediation to safeguard against potential service outages.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can host malicious SVGs with extremely large width and height values and trigger concurrent requests to exhaust available memory across proxy replicas.