CVE-2024-9159
CVE-2024-9159 · Incorrect Authorization in gaizhenbiao/chuanhuchatgpt
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.
CVSS 6.5 · Medium · EPSS 0.7%
- Published
- Updated
Stack: python
Affected products and versions
gaizhenbiao/chuanhuchatgpt
- Versions
- ≥ unspecified, ≤ latest: Affected (custom)
No fix published
chuanhuchatgpt PyPI
- Affected ranges
- ECOSYSTEM: ≤ 2024-12-04
No fix published