Authentication Bypass in ChuanhuChatGPT by Gaizhenbiao

CVE-2024-9216

What is CVE-2024-9216?

An authentication bypass vulnerability discovered in ChuanhuChatGPT allows attackers to manipulate HTTP requests to access and potentially delete other users' chat histories. This issue arises because the system retrieves the username from client-side requests rather than a secure source like a cookie. Consequently, unauthorized users can exploit this weakness by specifying another user's username, leading to a serious breach of personal data security.

References