In short
- CVE-2024-9159 is a MEDIUM (CVSS 6.5) vulnerability affecting chuanhuchatgpt, chuanhuchatgpt (gaizhenbiao).
- Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.2% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.
NVD description
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.
More vulnerabilities in chuanhuchatgpt
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free