Server-Side Request Forgery in Gaizhenbiao by Chuanhuchatgpt

CVE-2025-0188

What is CVE-2025-0188?

A Server-Side Request Forgery (SSRF) vulnerability has been identified in Gaizhenbiao by Chuanhuchatgpt, particularly in version 20240914. This security flaw enables an attacker to exploit the application's handling of response links by saving them in a folder named after the SHA-1 hash of the target URL. Such exploitation poses significant risks, including unauthorized access to internal systems and sensitive data, potential data theft, disruption of services, and opportunities for expanded attacks, such as port scanning and accessing metadata endpoints. Organizations using this version are advised to implement immediate security measures.

References