VendorsGaiZhenbiaochuanhuchatgptall versions
Vulnerabilities

GaiZhenbiao ChuanhuChatGPT

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

31CVEs
CVE-2024-5982
Path Traversal in gaizhenbiao/chuanhuchatgpt
Published 2024-10-29 · Analyzed
9.8EPSS 0.313
CVE-2024-3234
Path Traversal in gaizhenbiao/chuanhuchatgpt
Published 2024-06-06 · Modified
9.8EPSS 0.038
CVE-2024-5822
Server-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT
Published 2024-06-27 · Analyzed
9.8EPSS 0.005
CVE-2024-6255
Path Traversal in gaizhenbiao/chuanhuchatgpt
Published 2024-07-31 · Modified
9.1EPSS 0.131
CVE-2024-6036
Denial of Service in gaizhenbiao/chuanhuchatgpt
Published 2024-07-10 · Analyzed
9.1EPSS 0.109
CVE-2024-6037
Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt
Published 2024-07-10 · Modified
9.1EPSS 0.107
CVE-2024-5823
File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt
Published 2024-10-29 · Analyzed
9.1EPSS 0.006
CVE-2024-8613
Improper Access Control in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Modified
8.8EPSS 0.006
CVE-2024-9216
Authentication Bypass in gaizhenbiao/ChuanhuChatGPT
Published 2025-03-20 · Analyzed
8.1EPSS 0.006
CVE-2024-5124
Timing Attack Vulnerability in gaizhenbiao/chuanhuchatgpt
Published 2024-06-06 · Modified
7.5EPSS 0.014
CVE-2024-6090
Path Traversal Vulnerability in gaizhenbiao/chuanhuchatgpt
Published 2024-06-27 · Modified
7.5EPSS 0.009
CVE-2024-7962
Arbitrary File Read via Insufficient Validation in gaizhenbiao/chuanhuchatgpt
Published 2024-10-29 · Analyzed
7.5EPSS 0.008
CVE-2024-2217
Improper Access Control in gaizhenbiao/chuanhuchatgpt
Published 2024-04-10 · Analyzed
7.5EPSS 0.008
CVE-2024-10650
Denial of Service (DoS) in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Modified
7.5EPSS 0.007
CVE-2024-6038
ReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt
Published 2024-06-27 · Modified
7.5EPSS 0.007
CVE-2024-7807
Denial of Service (DOS) in gaizhenbiao/chuanhuchatgpt
Published 2024-10-29 · Modified
7.5EPSS 0.006
CVE-2024-4321
Local File Inclusion (LFI) in gaizhenbiao/chuanhuchatgpt
Published 2024-05-16 · Analyzed
7.5EPSS 0.006
CVE-2024-4520
Improper Access Control in gaizhenbiao/chuanhuchatgpt
Published 2024-06-04 · Modified
7.5EPSS 0.005
CVE-2024-6035
Stored XSS in gaizhenbiao/chuanhuchatgpt
Published 2024-07-11 · Modified
7.4EPSS 0.004
CVE-2024-9107
Stored XSS in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Analyzed
6.8EPSS 0.006
CVE-2024-3402
Stored XSS vulnerability in gaizhenbiao/chuanhuchatgpt
Published 2024-06-06 · Modified
6.8EPSS 0.005
CVE-2024-10955
ReDoS (Regular Expression Denial of Service) in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Modified
6.5EPSS 0.007
CVE-2024-10707
Local File Inclusion in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Modified
6.5EPSS 0.007
CVE-2024-9159
Incorrect Authorization in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Analyzed
6.5EPSS 0.006
CVE-2024-5278
Unrestricted File Upload leading to RCE in gaizhenbiao/chuanhuchatgpt
Published 2024-06-06 · Modified
6.5EPSS 0.006
CVE-2025-0191
Denial of Service in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Analyzed
6.5EPSS 0.006
CVE-2024-3404
Improper Access Control in gaizhenbiao/chuanhuchatgpt
Published 2024-06-06 · Modified
6.5EPSS 0.005
CVE-2024-8143
Unauthorized Access to User Chat History in gaizhenbiao/chuanhuchatgpt
Published 2024-10-29 · Analyzed
6.5EPSS 0.005
CVE-2025-0188
SSRF in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Analyzed
6.5EPSS 0.005
CVE-2024-48059
gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim accesses this session, the malicious JavaScript is executed in the victim's browser.
Published 2024-11-04 · Analyzed
6.1EPSS 0.003
CVE-2024-8400
Stored XSS in gaizhenbiao/chuanhuchatgpt
Published 2025-03-20 · Analyzed
5.4EPSS 0.004