Arbitrary File Read Vulnerability in Gaizhenbiao Chuanhuchatgpt
CVE-2024-7962

7.5HIGH

Key Information:

Vendor

Gaizhenbiao

Status
Chuanhuchatgpt
Vendor
CVE Published:
29 October 2024

What is CVE-2024-7962?

An arbitrary file read vulnerability exists in Gaizhenbiao's Chuanhuchatgpt product due to inadequate validation mechanisms when loading prompt template files. This issue permits attackers to read any file that aligns with specific formatting criteria, which includes using absolute paths. Notably, files attempted to be read cannot have a .json extension, and all lines except the first must contain commas. Such vulnerabilities have the potential to expose sensitive information that resides in format-compliant files, which can include critical data such as account credentials, code, and log files.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://huntr.com/bounties/83f0a8e1-490c-49e7-b334-02125e...
https://github.com/gaizhenbiao/chuanhuchatgpt/commit/2836...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.