{"kind": "product", "path": "vulns/pypi/chuanhuchatgpt", "name": "chuanhuchatgpt", "product": "chuanhuchatgpt", "ecosystem": "PyPI", "items": [{"id": "CVE-2024-8613", "noindex": false, "published": "2025-03-20T10:11:38.821Z", "modified": "2025-10-15T12:49:57.004Z", "cvss": 8.1, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "severity": "high", "epss": 0.006, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-8613", "title": "Improper Access Control in gaizhenbiao/chuanhuchatgpt", "description": "A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.", "references": ["https://huntr.com/bounties/76258774-b011-4044-9c3d-c2609b1cbd29", "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705", "https://nvd.nist.gov/vuln/detail/CVE-2024-8613"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-9216", "noindex": false, "published": "2025-03-20T10:11:38.173Z", "modified": "2025-03-20T18:08:04.051Z", "cvss": 8.1, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "severity": "high", "epss": 0.00628, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-9216", "title": "Authentication Bypass in gaizhenbiao/ChuanhuChatGPT", "description": "An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user's username to the get_model function, thereby gaining unauthorized access to that user's chat history.", "references": ["https://huntr.com/bounties/21e54c3f-e2d7-423b-9890-1f0cb99af4dd", "https://nvd.nist.gov/vuln/detail/CVE-2024-9216"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-10650", "noindex": false, "published": "2025-03-20T10:11:29.258Z", "modified": "2025-10-15T12:49:24.004Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00725, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-10650", "title": "Denial of Service (DoS) in gaizhenbiao/chuanhuchatgpt", "description": "An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for CVE-2024-7807, the issue can still be exploited by sending data in groups with 10 characters in a line, with multiple lines. This can cause the system to continuously process these characters, resulting in prolonged unavailability of the service. The exploitation now requires low privilege if authentication is enabled due to a version upgrade in Gradio.", "references": ["https://huntr.com/bounties/f820371d-a878-44bf-b1fd-2d837dd58eb4", "https://nvd.nist.gov/vuln/detail/CVE-2024-10650"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-10955", "noindex": false, "published": "2025-03-20T10:11:01.287Z", "modified": "2025-10-15T12:50:14.963Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00744, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-10955", "title": "ReDoS (Regular Expression Denial of Service) in gaizhenbiao/chuanhuchatgpt", "description": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pattern `r'<[^>]+>'` to parse user input. In Python's default regex engine, this pattern can take polynomial time to match certain crafted inputs. An attacker can exploit this by uploading a malicious JSON payload, causing the server to consume 100% CPU for an extended period. This can lead to a Denial of Service (DoS) condition, potentially affecting the entire server.", "references": ["https://huntr.com/bounties/8291f8d0-5060-47e7-9986-1f411310fb7b", "https://nvd.nist.gov/vuln/detail/CVE-2024-10955"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-0191", "noindex": false, "published": "2025-03-20T10:10:46.084Z", "modified": "2025-03-20T18:17:02.569Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00603, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-0191", "title": "Denial of Service in gaizhenbiao/chuanhuchatgpt", "description": "A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.", "references": ["https://huntr.com/bounties/c89a1dfd-a733-41b3-af20-6ef6024361eb", "https://nvd.nist.gov/vuln/detail/CVE-2025-0191"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-9159", "noindex": false, "published": "2025-03-20T10:10:13.099Z", "modified": "2025-03-20T18:24:27.927Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.0065, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-9159", "title": "Incorrect Authorization in gaizhenbiao/chuanhuchatgpt", "description": "An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.", "references": ["https://huntr.com/bounties/ab0f8fbb-c17a-45a7-8dab-7d4c8b90490a", "https://nvd.nist.gov/vuln/detail/CVE-2024-9159"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-9107", "noindex": false, "published": "2025-03-20T10:10:12.783Z", "modified": "2025-03-20T18:24:36.444Z", "cvss": 6.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N", "severity": "medium", "epss": 0.00566, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-9107", "title": "Stored XSS in gaizhenbiao/chuanhuchatgpt", "description": "A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerability arises from improper sanitization of HTML tags in chat history uploads. Specifically, the sanitization logic fails to handle HTML tags within code blocks correctly, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser, potentially leading to identity theft or other malicious actions.", "references": ["https://huntr.com/bounties/a2972c51-4780-4f60-afbf-a7a8ee4066ea", "https://nvd.nist.gov/vuln/detail/CVE-2024-9107"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-10707", "noindex": false, "published": "2025-03-20T10:09:56.842Z", "modified": "2025-10-15T12:49:24.414Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00742, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-10707", "title": "Local File Inclusion in gaizhenbiao/chuanhuchatgpt", "description": "gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941). This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a specially crafted JSON file and exploiting the improper input validation in the handle_dataset_selection function.", "references": ["https://huntr.com/bounties/98fdedea-6ad0-4157-b7d2-ae71c9786ee8", "https://nvd.nist.gov/vuln/detail/CVE-2024-10707"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-0188", "noindex": false, "published": "2025-03-20T10:09:09.391Z", "modified": "2025-10-15T12:50:48.138Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00492, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-0188", "title": "SSRF in gaizhenbiao/chuanhuchatgpt", "description": "A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access the response directly, potentially leading to unauthorized access to internal systems, data theft, service disruption, or further attacks such as port scanning and accessing metadata endpoints.", "references": ["https://huntr.com/bounties/879d2470-eca5-49c0-b3d1-57469cfff412", "https://nvd.nist.gov/vuln/detail/CVE-2025-0188"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-8143", "noindex": false, "published": "2024-10-29T12:49:09.525Z", "modified": "2024-10-29T13:23:01.857Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00486, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-8143", "title": "Unauthorized Access to User Chat History in gaizhenbiao/chuanhuchatgpt", "description": "In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user's name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users' directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user's private chat history.", "references": ["https://huntr.com/bounties/71c5ea4b-524a-4173-8fd4-2fbabd69502e", "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/ccc7479ace5c9e1a1d9f4daf2e794ffd3865fc2b", "https://nvd.nist.gov/vuln/detail/CVE-2024-8143"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-7807", "noindex": false, "published": "2024-10-29T12:48:16.107Z", "modified": "2025-01-09T17:13:30.519Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.0063, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-7807", "title": "Denial of Service (DOS) in gaizhenbiao/chuanhuchatgpt", "description": "A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering ChuanhuChatGPT inaccessible. This uncontrolled resource consumption can lead to prolonged unavailability of the service, disrupting operations and causing potential data inaccessibility and loss of productivity.", "references": ["https://huntr.com/bounties/db67276d-36ee-4487-9165-b621c67ef8a3", "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/919222d285d73b9dcd71fb34de379eef8c90d175", "https://nvd.nist.gov/vuln/detail/CVE-2024-7807"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-7962", "noindex": false, "published": "2024-10-29T12:47:58.697Z", "modified": "2024-10-29T13:38:20.986Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.00792, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-7962", "title": "Arbitrary File Read via Insufficient Validation in gaizhenbiao/chuanhuchatgpt", "description": "An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches specific criteria using an absolute path. The file must not have a .json extension and, except for the first line, every other line must contain commas. This vulnerability allows reading parts of format-compliant files, including code and log files, which may contain highly sensitive information such as account credentials.", "references": ["https://huntr.com/bounties/83f0a8e1-490c-49e7-b334-02125ee0f1b1", "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/2836fd1db3efcd5ede63c0e7fbbdf677730dbb51", "https://nvd.nist.gov/vuln/detail/CVE-2024-7962"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6255", "noindex": false, "published": "2024-07-31T00:00:15.258Z", "modified": "2024-08-30T15:29:49.126Z", "cvss": 8.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "severity": "high", "epss": 0.13662, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6255", "title": "Path Traversal in gaizhenbiao/chuanhuchatgpt", "description": "A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.json` and `ds_config_chatbot.json`. This issue arises due to improper validation of file paths, enabling directory traversal attacks. An attacker can exploit this vulnerability to disrupt the functioning of the system, manipulate settings, or potentially cause data loss or corruption.", "references": ["https://huntr.com/bounties/48f3e370-6dcd-4f38-9350-d0419b3a7f82", "https://nvd.nist.gov/vuln/detail/CVE-2024-6255"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6035", "noindex": false, "published": "2024-07-11T10:41:27.535Z", "modified": "2024-08-01T21:25:03.110Z", "cvss": 7.4, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "severity": "high", "epss": 0.00371, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6035", "title": "Stored XSS in gaizhenbiao/chuanhuchatgpt", "description": "A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410. This vulnerability allows an attacker to inject malicious JavaScript code into the chat history file. When a victim uploads this file, the malicious script is executed in the victim's browser. This can lead to user data theft, session hijacking, malware distribution, and phishing attacks.", "references": ["https://huntr.com/bounties/e4e8da71-53a9-4540-8d70-6b670b076987", "https://nvd.nist.gov/vuln/detail/CVE-2024-6035"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6036", "noindex": false, "published": "2024-07-10T22:57:33.930Z", "modified": "2024-08-01T21:25:03.176Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.10849, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6036", "title": "Denial of Service in gaizhenbiao/chuanhuchatgpt", "description": "A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `\"fn_index\":66`. This unrestricted server restart capability can severely disrupt service availability, cause data loss or corruption, and potentially compromise system integrity.", "references": ["https://huntr.com/bounties/e9eaaea9-5750-4955-9142-2f12ad4b06db", "https://nvd.nist.gov/vuln/detail/CVE-2024-6036"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6037", "noindex": false, "published": "2024-07-10T22:43:22.785Z", "modified": "2025-10-15T12:49:45.163Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.10693, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6037", "title": "Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt", "description": "A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service (DoS), server unavailability, and potential data loss or corruption.", "references": ["https://huntr.com/bounties/eca6904f-f9fd-40c8-9e85-96f54daf405e", "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/71cb89c4c948dae5aaa0ae64b98f98e3965bdb37", "https://nvd.nist.gov/vuln/detail/CVE-2024-6037"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-5822", "noindex": false, "published": "2024-06-27T18:44:48.521Z", "modified": "2024-08-01T21:25:02.741Z", "cvss": 7.3, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "severity": "high", "epss": 0.00523, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-5822", "title": "Server-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT", "description": "A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attackers to send crafted requests from the vulnerable server to internal or external resources, potentially bypassing security controls and accessing sensitive data.", "references": ["https://huntr.com/bounties/b24f1b5f-a529-435b-ac4d-5ca71d5d1fb5", "https://nvd.nist.gov/vuln/detail/CVE-2024-5822"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6038", "noindex": false, "published": "2024-06-27T18:41:45.405Z", "modified": "2025-10-15T12:50:31.656Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00657, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6038", "title": "ReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt", "description": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filter_history function within the utils.py module. This function takes a user-provided keyword and attempts to match it against chat history filenames using a regular expression search. Due to the lack of sanitization or validation of the keyword parameter, an attacker can inject a specially crafted regular expression, leading to a denial of service condition. This can cause severe degradation of service performance and potential system unavailability.", "references": ["https://huntr.com/bounties/d41cca0a-82bc-4cbf-a52a-928d304fb42d", "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/fcdd5fd6b05ef537a1db185ab115758d87e1ba3f", "https://nvd.nist.gov/vuln/detail/CVE-2024-6038"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-6090", "noindex": false, "published": "2024-06-27T18:40:51.125Z", "modified": "2025-10-15T12:50:32.559Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00859, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-6090", "title": "Path Traversal Vulnerability in gaizhenbiao/chuanhuchatgpt", "description": "A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a denial of service as users are unable to authenticate.", "references": ["https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c", "https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705", "https://nvd.nist.gov/vuln/detail/CVE-2024-6090"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-4321", "noindex": false, "published": "2024-05-16T09:03:46.604Z", "modified": "2024-08-01T20:40:46.483Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.00597, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-4321", "title": "Local File Inclusion (LFI) in gaizhenbiao/chuanhuchatgpt", "description": "A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to improper input validation when handling file paths during the chat history upload process. An attacker can exploit this vulnerability by intercepting requests and manipulating the 'name' parameter to specify arbitrary file paths. This allows the attacker to read sensitive files on the server, leading to information leakage, including API keys and private information. The issue affects version 20240310 of the application.", "references": ["https://huntr.com/bounties/19a16f8e-3d92-498f-abc9-8686005f067e", "https://nvd.nist.gov/vuln/detail/CVE-2024-4321"], "fixes": [], "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}]}], "total": 21, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "chuanhuchatgpt", "path": "vulns/pypi/chuanhuchatgpt", "ecosystem": "PyPI"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2025-10-15T12:50:48.138Z", "early_advisories": [], "license": "Puedes utilizar libremente la selección de PatchFirst y nuestras aportaciones (prioridades, alertas tempranas, textos, resúmenes y agregados) para tus propios fines, incluido el uso interno de tu empresa. La reventa, la distribución comercial y la creación masiva de réplicas de esta selección o de estas aportaciones requieren un acuerdo escrito con el operador. Siempre que uses o publiques la selección o nuestras aportaciones, cita a PatchFirst (https://patchfirst.dev/vulns/) con este enlace a la página del flujo de tu región. Los registros originales de fuentes abiertas siguen sujetos a sus respectivas licencias y condiciones. Estas condiciones no limitan tus derechos sobre los datos originales, que puedes obtener directamente de esas fuentes.", "terms_url": "https://patchfirst.dev/es/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst selecciona, normaliza y combina los registros; se pueden añadir resúmenes y traducciones. Las noticias incluyen un enlace a la fuente original en cada entrada.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Las licencias de las bases originales varían; consulta el catálogo de fuentes."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Puntuaciones públicas gratuitas; se solicita atribución (FIRST EPSS, puntuaciones generadas por Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}