In short
- CVE-2024-6090 is a HIGH (CVSS 7.5) vulnerability affecting chuanhuchatgpt, chuanhuchatgpt (gaizhenbiao).
- Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.5% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in .json on the target system, leading to a denial of service as users are unable to authenticate.
NVD description
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a denial of service as users are unable to authenticate.
More vulnerabilities in chuanhuchatgpt
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free