Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-62xp-4pcv-pw3j

Опубликовано: 20 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.

EPSS

Процентиль: 24%
0.0008
Низкий

8.1 High

CVSS3

Дефекты

CWE-284
CWE-639

Связанные уязвимости

CVSS3: 8.8
nvd
11 месяцев назад

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.

EPSS

Процентиль: 24%
0.0008
Низкий

8.1 High

CVSS3

Дефекты

CWE-284
CWE-639