What’s Vulnerable › Vulnerabilities

CVE-2024-8613: Improper Access Control in gaizhenbiao/chuanhuchatgpt

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-03-20 · updated 2026-06-17
• Weakness: CWE-639

Description

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.

Affected products

• gaizhenbiao/chuanhuchatgpt: 20240802

References

• https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705
• https://huntr.com/bounties/76258774-b011-4044-9c3d-c2609b1cbd29

Get alerted when CVE-2024-8613 or the next vulnerability affects your stack