by Kastro
Paper/Archive/CVE-2024-5823

CVE-2024-5823

gaizhenbiao gaizhenbiao/chuanhuchatgpt — File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

EPSS 0.5%public exploitCVSS 9.1
critical.is priorityof 100
47
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 46.0.460 × 209.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation.

Affected

ProductAffectedFixed inSource
gaizhenbiao/chuanhuchatgptunspecified – < 2024091920240919CNA
chuanhuchatgpt≤ 20240410–CISA-ADP

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
@huntr_ai (CNA)6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refhuntr.com/bounties/ca361701-7d68-4df6-8da0-caad4b85b9aerefgithub.com/gaizhenbiao/chuanhuchatgpt/commit/720c23d755a4a955dcb0a54e8c200a2247a27f8b