Browse CVEs

MEDIUM 6.5 CVE-2025-0188 A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacke… Chuanhuchatgpt No fix yet Fix from $1,6002025-03-20 MEDIUM 6.5 CVE-2025-0191 A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to… Chuanhuchatgpt No fix yet Fix from $1,6002025-03-20 HIGH 8.1 CVE-2024-9216 An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' … Chuanhuchatgpt No fix yet Fix from $1,9502025-03-20 MEDIUM 6.5 CVE-2024-9159 An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the s… Chuanhuchatgpt No fix yet Fix from $1,6002025-03-20 MEDIUM 5.4 CVE-2024-9107 A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerabili… Chuanhuchatgpt No fix yet Fix from $1,6002025-03-20 HIGH 8.8 CVE-2024-8613 A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue a… Chuanhuchatgpt Patch available Fix from $1,9502025-03-20 MEDIUM 5.4 CVE-2024-8400 A stored cross-site scripting (XSS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability allows an attacker to… Chuanhuchatgpt 20240410+ Fix from $1,6002025-03-20 MEDIUM 6.5 CVE-2024-10955 A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pa… Chuanhuchatgpt No fix yet Fix from $1,6002025-03-20 HIGH 7.5 CVE-2024-10650 An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large… Chuanhuchatgpt No fix yet Fix from $1,9502025-03-20 MEDIUM 6.5 CVE-2024-10707 gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, wh… Chuanhuchatgpt No fix yet Fix from $1,6002025-03-20 MEDIUM 6.1 CVE-2024-48059 gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attac… Chuanhuchatgpt after 20240802 Fix from $1,6002024-11-04 HIGH 7.5 CVE-2024-7807 A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker app… Chuanhuchatgpt Patch available Fix from $1,9502024-10-29 HIGH 7.5 CVE-2024-7962 An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt templat… Chuanhuchatgpt Patch available Fix from $1,9502024-10-29 CRITICAL 9.8 CVE-2024-5982EPSS 31% A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling i… Chuanhuchatgpt 20240918+ Fix from $2,3002024-10-29 CRITICAL 9.1 CVE-2024-5823 A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized … Chuanhuchatgpt after 2024-04-10 Fix from $2,3002024-10-29 CRITICAL 9.1 CVE-2024-6255EPSS 13% A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, inclu… Chuanhuchatgpt No fix yet Fix from $2,3002024-07-31 MEDIUM 6.1 CVE-2024-6035 A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410. This vulnerability allows an attacker to inj… Chuanhuchatgpt No fix yet Fix from $1,6002024-07-11 CRITICAL 9.1 CVE-2024-6036EPSS 11% A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/q… Chuanhuchatgpt No fix yet Fix from $2,3002024-07-10 CRITICAL 9.1 CVE-2024-6037EPSS 11% A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, includin… Chuanhuchatgpt Patch available Fix from $2,3002024-07-10 HIGH 7.5 CVE-2024-6038 A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located… Chuanhuchatgpt Patch available Fix from $1,9502024-06-27 HIGH 7.5 CVE-2024-6090 A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This v… Chuanhuchatgpt Patch available Fix from $1,9502024-06-27 CRITICAL 9.8 CVE-2024-5822 A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT… Chuanhuchatgpt No fix yet Fix from $2,3002024-06-27 MEDIUM 6.1 CVE-2024-5278 gaizhenbiao/chuanhuchatgpt is vulnerable to an unrestricted file upload vulnerability due to insufficient validation of uploaded file types in its `/… Chuanhuchatgpt 20240919+ Fix from $1,6002024-06-06 HIGH 7.5 CVE-2024-5124 A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerabili… Chuanhuchatgpt 20240628+ Fix from $1,9502024-06-06 CRITICAL 9.8 CVE-2024-3234 The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application i… Chuanhuchatgpt 20240305+ Fix from $2,3002024-06-06 MEDIUM 6.5 CVE-2024-3404 In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper access control mechanisms. T… Chuanhuchatgpt 20240919-4+ Fix from $1,6002024-06-06 MEDIUM 5.4 CVE-2024-3402 A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to inadequate sanitization and vali… Chuanhuchatgpt 20240918+ Fix from $1,6002024-06-06 HIGH 7.5 CVE-2024-4520 An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 20240410. This vulnerability a… Chuanhuchatgpt after 20240410 Fix from $1,9502024-06-04 HIGH 7.5 CVE-2024-4321 A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading … Chuanhuchatgpt No fix yet Fix from $1,9502024-05-16 HIGH 7.5 CVE-2024-2217 gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is pr… Chuanhuchatgpt Patch available Fix from $1,9502024-04-10