What’s Vulnerable › Vulnerabilities

CVE-2024-6090: Path Traversal Vulnerability in gaizhenbiao/chuanhuchatgpt

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-06-27 · updated 2026-06-17
• Weakness: CWE-22

Description

A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a denial of service as users are unable to authenticate.

Affected products

• gaizhenbiao/chuanhuchatgpt: 20240410

References

• https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705
• https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c
• https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c

Get alerted when CVE-2024-6090 or the next vulnerability affects your stack