Vulnerability · Published Oct 29, 2024 · Assigned by @huntr_ai
CVE-2024-5982Path Traversal in gaizhenbiao/chuanhuchatgpt
Critical 9.1
In plain English
A critical-severity path traversal in gaizhenbiao/chuanhuchatgpt from gaizhenbiao. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 31.3% (higher than 98% of all known vulnerabilities).
Official description
A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| gaizhenbiao | gaizhenbiao/chuanhuchatgpt | unspecified – before 20240918 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H