Vulnerability index

Browse CVEs

30 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Chuanhuchatgpt MEDIUM 6.5
CVE-2025-0188

A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacke…

No fix yet
Fix from $1,600 2025-03-20
Chuanhuchatgpt MEDIUM 6.5
CVE-2025-0191

A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to…

No fix yet
Fix from $1,600 2025-03-20
Chuanhuchatgpt HIGH 8.1
CVE-2024-9216

An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' …

No fix yet
Fix from $1,950 2025-03-20
Chuanhuchatgpt MEDIUM 6.5
CVE-2024-9159

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the s…

No fix yet
Fix from $1,600 2025-03-20
Chuanhuchatgpt MEDIUM 5.4
CVE-2024-9107

A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version git 20b2e02. The vulnerabili…

No fix yet
Fix from $1,600 2025-03-20
Chuanhuchatgpt HIGH 8.8
CVE-2024-8613

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue a…

Patch available
Fix from $1,950 2025-03-20
Chuanhuchatgpt MEDIUM 5.4
CVE-2024-8400

A stored cross-site scripting (XSS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability allows an attacker to…

Fix: 20240410+
Fix from $1,600 2025-03-20
Chuanhuchatgpt MEDIUM 6.5
CVE-2024-10955

A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02. The server uses the regex pa…

No fix yet
Fix from $1,600 2025-03-20
Chuanhuchatgpt HIGH 7.5
CVE-2024-10650

An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large…

No fix yet
Fix from $1,950 2025-03-20
Chuanhuchatgpt MEDIUM 6.5
CVE-2024-10707

gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, wh…

No fix yet
Fix from $1,600 2025-03-20
Chuanhuchatgpt MEDIUM 6.1
CVE-2024-48059

gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attac…

Fix: after 20240802
Fix from $1,600 2024-11-04
Chuanhuchatgpt HIGH 7.5
CVE-2024-7807

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker app…

Patch available
Fix from $1,950 2024-10-29
Chuanhuchatgpt HIGH 7.5
CVE-2024-7962

An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt templat…

Patch available
Fix from $1,950 2024-10-29
Chuanhuchatgpt CRITICAL 9.8
CVE-2024-5982EPSS 31%

A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling i…

Fix: 20240918+
Fix from $2,300 2024-10-29
Chuanhuchatgpt CRITICAL 9.1
CVE-2024-5823

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized …

Fix: after 2024-04-10
Fix from $2,300 2024-10-29
Chuanhuchatgpt CRITICAL 9.1
CVE-2024-6255EPSS 13%

A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, inclu…

No fix yet
Fix from $2,300 2024-07-31
Chuanhuchatgpt MEDIUM 6.1
CVE-2024-6035

A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410. This vulnerability allows an attacker to inj…

No fix yet
Fix from $1,600 2024-07-11
Chuanhuchatgpt CRITICAL 9.1
CVE-2024-6036EPSS 11%

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/q…

No fix yet
Fix from $2,300 2024-07-10
Chuanhuchatgpt CRITICAL 9.1
CVE-2024-6037EPSS 11%

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, includin…

Patch available
Fix from $2,300 2024-07-10
Chuanhuchatgpt HIGH 7.5
CVE-2024-6038

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located…

Patch available
Fix from $1,950 2024-06-27
Chuanhuchatgpt HIGH 7.5
CVE-2024-6090

A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This v…

Patch available
Fix from $1,950 2024-06-27
Chuanhuchatgpt CRITICAL 9.8
CVE-2024-5822

A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT…

No fix yet
Fix from $2,300 2024-06-27
Chuanhuchatgpt MEDIUM 6.1
CVE-2024-5278

gaizhenbiao/chuanhuchatgpt is vulnerable to an unrestricted file upload vulnerability due to insufficient validation of uploaded file types in its `/…

Fix: 20240919+
Fix from $1,600 2024-06-06
Chuanhuchatgpt HIGH 7.5
CVE-2024-5124

A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic. The vulnerabili…

Fix: 20240628+
Fix from $1,950 2024-06-06
Chuanhuchatgpt CRITICAL 9.8
CVE-2024-3234

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application i…

Fix: 20240305+
Fix from $2,300 2024-06-06
Chuanhuchatgpt MEDIUM 6.5
CVE-2024-3404

In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper access control mechanisms. T…

Fix: 20240919-4+
Fix from $1,600 2024-06-06
Chuanhuchatgpt MEDIUM 5.4
CVE-2024-3402

A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to inadequate sanitization and vali…

Fix: 20240918+
Fix from $1,600 2024-06-06
Chuanhuchatgpt HIGH 7.5
CVE-2024-4520

An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 20240410. This vulnerability a…

Fix: after 20240410
Fix from $1,950 2024-06-04
Chuanhuchatgpt HIGH 7.5
CVE-2024-4321

A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading …

No fix yet
Fix from $1,950 2024-05-16
Chuanhuchatgpt HIGH 7.5
CVE-2024-2217

gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is pr…

Patch available
Fix from $1,950 2024-04-10