Server-Side Request Forgery Vulnerability in ChuanhuChatGPT by gaizhenbiao
CVE-2024-5822

9.8CRITICAL

Key Information:

Vendor

gaizhenbiao

Status
ChuanhuChatGPT
Vendor
CVE Published:
27 June 2024

What is CVE-2024-5822?

A Server-Side Request Forgery (SSRF) vulnerability is present in the upload processing interface of ChuanhuChatGPT developed by gaizhenbiao. This flaw enables attackers to manipulate crafted requests originating from the server to access both internal and external resources. As a result, security mechanisms may be circumvented, leading to potential exposure of sensitive information. The affected versions include ChuanhuChatGPT versions up to and including ChuanhuChatGPT-20240410-git.zip.

References

https://huntr.com/bounties/b24f1b5f-a529-435b-ac4d-5ca71d...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-5822 : Server-Side Request Forgery Vulnerability in ChuanhuChatGPT by gaizhenbiao