Vulnerability · Published Oct 29, 2024 · Assigned by @huntr_ai

CVE-2024-5823File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

Medium 6.5

In plain English

A medium-severity security flaw in gaizhenbiao/chuanhuchatgpt from gaizhenbiao. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.0)6.5Medium

Exploit odds (30 days)0.5%top 53.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation.

Affected products (as reported)

Vendor	Product	Versions
gaizhenbiao	gaizhenbiao/chuanhuchatgpt	unspecified – before 20240919

Weakness: CWE-73 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

In plain English

Official description

Affected products (as reported)

References