CRITICAL🇵🇱 Wersja polska

CVE-2024-5823

CVSS 9.1v3.1pub. 2024-10-29upd. 2024-10-31

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Gaizhenbiao Chuanhuchatgpt

    APP
    Gaizhenbiao
    ≤ 2024-04-10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2024-5982CRITICAL9.8PL ✓ten sam produkt

Path Traversal i RCE w ChuanhuChatGPT — niezabezpieczone dane wejściowe

CVE-2024-6036CRITICAL9.1PL ✓ten sam produkt

Nieautoryzowany restart serwera w ChuanhuChatGPT poprzez endpoint /queue/join

CVE-2024-6037CRITICAL9.1PL ✓ten sam produkt

Tworzenie arbitralnych folderów na serwerze w ChuanhuChatGPT

CVE-2024-5822CRITICAL9.8PL ✓ten sam produkt

SSRF w interfejsie upload ChuanhuChatGPT — dostęp do zasobów wewnętrznych

CVE-2024-3234CRITICAL9.8PL ✓ten sam produkt

Path traversal w ChuanhuChatGPT — dostęp do poufnych plików