PT-2024-37334 · Unknown · Gaizhenbiao/Chuanhuchatgpt

Published 2024-07-10 · Updated 2025-07-15 · CVE-2024-6036

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240410

Description: A vulnerability allows any user to restart the server at will by sending a specific request to the "/queue/join?" endpoint with fn index:66. This unrestricted server restart capability can severely disrupt service availability, cause data loss or corruption, and potentially compromise system integrity.

Recommendations: For gaizhenbiao/chuanhuchatgpt version 20240410, consider restricting access to the /queue/join? endpoint or disabling the functionality associated with fn index:66 to prevent unauthorized server restarts until a patch is available.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-6036

PYSEC-2024-269

Affected Products

Gaizhenbiao/Chuanhuchatgpt

References · 8

• 🔥 https://huntr.com/bounties/e9eaaea9-5750-4955-9142-2f12ad4b06db · Exploit
• https://osv.dev/vulnerability/PYSEC-2024-269 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-6036 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6036 · Security Note
• https://twitter.com/VulmonFeeds/status/1811202460700021013 · Twitter Post
• https://t.me/cvenotify/128984 · Telegram Post
• https://t.me/cvedetector/602 · Telegram Post
• https://twitter.com/CVEnew/status/1811322678835605783 · Twitter Post