CVE-2024-6036
CVE-2024-6036 · Denial of Service in gaizhenbiao/chuanhuchatgpt
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`. This unrestricted server restart capability can severely disrupt service availability, cause data loss or corruption, and potentially compromise system integrity.
CVSS 7.5 · High · EPSS 10.8%
- Published
- Updated
Stack: python
Affected products and versions
gaizhenbiao/chuanhuchatgpt
- Versions
- ≥ unspecified, ≤ latest: Affected (custom)
No fix published
chuanhuchatgpt PyPI
- Versions
- 3.2.5
- Affected ranges
- ECOSYSTEM: ≤ 20240410
No fix published