CVE-2024-8613
CVE-2024-8613 · Improper Access Control in gaizhenbiao/chuanhuchatgpt
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.
CVSS 8.1 · High · EPSS 0.6%
- Published
- Updated
Stack: python
Affected products and versions
gaizhenbiao/chuanhuchatgpt
- Versions
- ≥ unspecified, < 20240918: Affected (custom)
No fix published
chuanhuchatgpt PyPI
- Versions
- 3.2.5
- Affected ranges
- ECOSYSTEM: ≤ 20240802
No fix published