PT-2024-38832 · Gaizhenbiao · Chuanhuchatgpt

Published 2024-10-13 · Updated 2024-10-31 · CVE-2024-8143

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240628

Description: The issue exists in the "/file" endpoint, allowing authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user's name. By manipulating the "/file" endpoint, an authenticated user can enumerate and access files in other users' directories, leading to unauthorized access to private chat histories. This can be exploited to read any user's private chat history.

Recommendations: For version 20240628, as a temporary workaround, consider restricting access to the "/file" endpoint until a patch is available. Additionally, avoid using the "/file" endpoint to access or manipulate user directories until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1057

Related Identifiers

CVE-2024-8143

PYSEC-2024-113

Affected Products

Chuanhuchatgpt

References · 8

• 🔥 https://huntr.com/bounties/71c5ea4b-524a-4173-8fd4-2fbabd69502e · Exploit
• https://github.com/gaizhenbiao/chuanhuchatgpt/commit/ccc7479ace5c9e1a1d9f4daf2e794ffd3865fc2b · Patch
• https://osv.dev/vulnerability/CVE-2024-8143 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8143 · Security Note
• https://twitter.com/ArunKr1shnan/status/1845711377249259762 · Twitter Post
• https://t.me/cvedetector/9311 · Telegram Post
• https://twitter.com/UndercodeNews/status/1852099246834524347 · Twitter Post