CVE-2023-34094

MEDIO 5.3CVE-2023-34094 · Published 02/06/2023 · updated 17/06/2026

In breve

CVE-2023-34094 è una vulnerabilità MEDIO (CVSS 5.3) che riguarda chuanhuchatgpt (chuanhuchatgpt project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.62%, superiore al 50.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
chuanhuchatgpt chuanhuchatgpt_project	`≤ 2023-05-26`	No fix yet

Description

ChuanhuChatGPT is a graphical user interface for ChatGPT and many large language models. A vulnerability in versions 20230526 and prior allows unauthorized access to the config.json file of the privately deployed ChuanghuChatGPT project, when authentication is not configured. The attacker can exploit this vulnerability to steal the API keys in the configuration file. The vulnerability has been fixed in commit bfac445. As a workaround, setting up access authentication can help mitigate the vulnerability.

References

GaiZhenbiao/ChuanhuChatGPT commit bfac445 · Patch
GaiZhenbiao/ChuanhuChatGPT security advisory · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free