CVE-2024-5823: File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-10-29 · updated 2026-06-17
Weakness: CWE-73

Description

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation.

Affected products

gaizhenbiao/chuanhuchatgpt: through 2024-04-10

References

https://github.com/gaizhenbiao/chuanhuchatgpt/commit/720c23d755a4a955dcb0a54e8c200a2247a27f8b
https://huntr.com/bounties/ca361701-7d68-4df6-8da0-caad4b85b9ae

Get alerted when CVE-2024-5823 or the next vulnerability affects your stack