gaizhenbiao/chuanhuchatgpt vulnerabilities
18 known vulnerabilities in gaizhenbiao/chuanhuchatgpt from GaiZhenbiao. 18 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
gaizhenbiao/chuanhuchatgpt: Missing Critical Step in Authentication
An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the username is provided via an HTTP request from the client sid
- 8.8 High severity
gaizhenbiao/chuanhuchatgpt: Authorization Bypass Through User-Controlled Key
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to vie
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Allocation of Resources Without Limits or Throttling
An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for CVE-2024-7807, the issue can still
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches specific criteria using an absolute path. The file must not
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Allocation of Resources Without Limits or Throttling
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each
- 9.8 Critical severity
gaizhenbiao/chuanhuchatgpt: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_ch
- 9.1 Critical severity
gaizhenbiao/chuanhuchatgpt: Externally Controlled Reference to a Resource in Another Sphere
A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to u
- 9.1 Critical severity
gaizhenbiao/chuanhuchatgpt: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.json` and `ds_config_chatbot.json`. This issue arises due to
- 9.1 Critical severity
gaizhenbiao/chuanhuchatgpt: Allocation of Resources Without Limits or Throttling
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to uncontrolled resource consumption, resulting in resource exhaus
- 9.1 Critical severity
gaizhenbiao/chuanhuchatgpt: Uncontrolled Resource Consumption
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`. This unrestricted server restart capability can severely disrupt ser
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a den
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Inefficient Regular Expression Complexity
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filter_history function within the utils.py module. This function takes a user-provided keyword and att
- 9.8 Critical severity
gaizhenbiao/chuanhuchatgpt: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attackers to send crafted requests from the vulnerable server to i
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Observable Discrepancy
A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerability is present in version 20240310 of the software, where passwords are compared using the '=' operator in Pytho
- 9.8 Critical severity
gaizhenbiao/chuanhuchatgpt: Improper Limitation of a Pathname to a Restricted Directory
The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version o
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Missing Authorization
An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 20240410. This vulnerability allows any user on the server to access the chat history of any other user without requiring any form of interac
- 7.5 High severity
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt…
A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to improper input validation when handling file paths during the cha
- 7.5 High severity
gaizhenbiao/chuanhuchatgpt: Improper Access Control
gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated versions of the application, enabling attackers to obtain sensi