Path Traversal Vulnerability in gaizhenbiao's ChuanhuChatGPT Application

CVE-2024-6090

What is CVE-2024-6090?

A path traversal vulnerability in ChuanhuChatGPT allows unauthenticated users to delete chat histories of other users, as well as any files with a .json extension on the server. This issue significantly affects the application's functionality, leading to potential denial of service for legitimate users who cannot access the system for authentication.

References