Chuanhuchatgpt
Approved changes feed: RSS · Atom
cpe:2.3:a:gaizhenbiao:chuanhuchatgpt:2024-12-04:*:*:*:*:*:*:*
part: a version: 2024-12-04 update: *
| Vendor | Gaizhenbiao (09e6d600-4bf0-5c06-a546-cd3bdcc3d6c8) |
|---|---|
| Product | Chuanhuchatgpt (63cd33cc-2b52-5d56-9739-278fa042d4d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gaizhenbiao/chuanhuchatgpt |
purl2cpe | 2026-06-01 10:12:59.973892 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-9216 |
vulnerable | 2026-06-08 07:00:26.940168 |
Authentication Bypass in gaizhenbiao/ChuanhuChatGPT
HIGH (8.1)
An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user's username to the get_model function, thereby gaining unauthorized access to that user's chat history.
Published: 2025-03-20T10:11:38.173Z
Updated: 2025-03-20T18:08:04.051Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9159 |
vulnerable | 2026-06-08 07:00:26.816234 |
Incorrect Authorization in gaizhenbiao/chuanhuchatgpt
MEDIUM (6.5)
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.
Published: 2025-03-20T10:10:13.099Z
Updated: 2025-03-20T18:24:27.927Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.