Unrestricted Server Restart Capability Leads to Sever Disruption and Data Loss

CVE-2024-6036

What is CVE-2024-6036?

A vulnerability in Gaizhenbiao's ChuanhuchatGPT version 20240410 enables any user to restart the server by sending a specific request to the /queue/join? endpoint with the parameter "fn_index":66. This flaw poses significant risks by allowing unauthorized server restarts, which can disrupt service availability and lead to data loss or corruption, thereby jeopardizing the overall integrity of the system.

References