PT-2024-37487 · Unknown · Gaizhenbiao/Chuanhuchatgpt

Published 2024-07-31 · Updated 2024-08-30 · CVE-2024-6255

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240410

Description: A vulnerability in the JSON file handling allows any user to delete any JSON file on the server, including critical configuration files such as config.json and ds config chatbot.json. This issue arises due to improper validation of file paths, enabling directory traversal attacks. An attacker can exploit this issue to disrupt the functioning of the system, manipulate settings, or potentially cause data loss or corruption.

Recommendations: For gaizhenbiao/chuanhuchatgpt version 20240410, consider restricting access to JSON file handling functionality until a patch is available. As a temporary workaround, restrict the ability to delete files such as config.json and ds config chatbot.json to minimize the risk of exploitation. Avoid using improper file path validation in the JSON file handling mechanism to prevent directory traversal attacks. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-6255

PYSEC-2024-73

Affected Products

Gaizhenbiao/Chuanhuchatgpt

References · 7

• 🔥 https://huntr.com/bounties/48f3e370-6dcd-4f38-9350-d0419b3a7f82 · Exploit
• https://osv.dev/vulnerability/PYSEC-2024-73 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-6255 · Security Note
• https://osv.dev/vulnerability/CVE-2024-6255 · Vendor Advisory
• https://t.me/cvenotify/87985 · Telegram Post
• https://t.me/cvenotify/92286 · Telegram Post
• https://t.me/cvedetector/2089 · Telegram Post