gaizhenbiao vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-9216 An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat historHigh 8.1 · Mar 20, 2025
• CVE-2024-8613 A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories.High 8.8 · Mar 20, 2025
• CVE-2024-10650 An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloHigh 7.5 · Mar 20, 2025
• CVE-2024-7962 An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files.High 7.5 · Oct 29, 2024
• CVE-2024-7807 A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack.High 7.5 · Oct 29, 2024
• CVE-2024-5982 A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt.Critical 9.8 · Oct 29, 2024
• CVE-2024-5823 A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410.Critical 9.1 · Oct 29, 2024
• CVE-2024-6255 A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including criticHigh 8.2 · Jul 30, 2024
• CVE-2024-6037 A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root Critical 9.1 · Jul 10, 2024
• CVE-2024-6036 A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?`Critical 9.1 · Jul 10, 2024
• CVE-2024-6090 A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories.High 7.5 · Jun 27, 2024
• CVE-2024-6038 A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt.High 7.5 · Jun 27, 2024
• CVE-2024-5822 A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-gCritical 9.8 · Jun 27, 2024
• CVE-2024-5124 A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic.High 7.5 · Jun 6, 2024
• CVE-2024-3234 The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component.Critical 9.8 · Jun 6, 2024
• CVE-2024-4520 An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 20240410.High 7.5 · Jun 4, 2024
• CVE-2024-4321 A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat historHigh 7.5 · May 16, 2024
• CVE-2024-2217 gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file.High 7.5 · Apr 10, 2024
• CVE-2023-34094 ChuanhuChatGPT is a graphical user interface for ChatGPT and many large language models.High 7.5 · Jun 2, 2023