Server-Side Request Forgery Vulnerability in ChuanhuChatGPT by gaizhenbiao
CVE-2024-5822

Currently unrated

Key Information:

Vendor

gaizhenbiao

Status
ChuanhuChatGPT
Vendor
CVE Published:
27 June 2024
đź”” Create gaizhenbiao Vulnerability Alert

What is CVE-2024-5822?

A Server-Side Request Forgery (SSRF) vulnerability is present in the upload processing interface of ChuanhuChatGPT developed by gaizhenbiao. This flaw enables attackers to manipulate crafted requests originating from the server to access both internal and external resources. As a result, security mechanisms may be circumvented, leading to potential exposure of sensitive information. The affected versions include ChuanhuChatGPT versions up to and including ChuanhuChatGPT-20240410-git.zip.

References

https://huntr.com/bounties/b24f1b5f-a529-435b-ac4d-5ca71d...

Timeline

  • Vulnerability published

.