pkg:PyPI/chuanhuchatgpt

所有已知漏洞

• CRITICAL9.8CVE-2024-5822A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= Chua…
  from 0, <= 20240410
• CRITICAL9.1CVE-2024-6255A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the ser…
  from 0
• CRITICAL9.1CVE-2024-6036A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request…
  from 0, <= 20240410
• HIGH8.1CVE-2024-9216An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete oth…
  from 0, <= 2024-12-04
• HIGH7.5CVE-2024-10650An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sen…
  from 0, <= 20240918
• HIGH7.5CVE-2024-7962An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prom…
  from 0, < 2836fd1db3efcd5ede63c0e7fbbdf677730dbb51 | from 0
• HIGH7.5CVE-2024-7807A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack.
  from 0, < 919222d285d73b9dcd71fb34de379eef8c90d175 | from 0
• HIGH7.5CVE-2024-4321A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for…
  from 0, <= 20240310
• MEDIUM6.5CVE-2025-0191A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914.
  from 0, <= 20240914
• MEDIUM6.5CVE-2025-0188A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914.
  from 0, <= 20240914
• MEDIUM6.5CVE-2024-9159An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc.
  from 0, <= 2024-12-04
• MEDIUM6.5CVE-2024-10955A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02.
  from 0, <= 2024-09-19
• MEDIUM6.5CVE-2024-10707gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component g…
  from 0, <= 2024-09-25
• MEDIUM6.1CVE-2024-6035A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410.
  from 0
• MEDIUM5.4CVE-2024-9107A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02.
  from 0, <= 2024-09-19
• MEDIUM4.3CVE-2024-8143In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to ac…
  from 0, < ccc7479ace5c9e1a1d9f4daf2e794ffd3865fc2b | from 0