Vulnerabilities > Gaizhenbiao > Chuanhuchatgpt > 20240914

DATE CVE VULNERABILITY TITLE RISK
2024-10-29 CVE-2024-5982 Path Traversal vulnerability in Gaizhenbiao Chuanhuchatgpt
A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt.
network
low complexity
gaizhenbiao CWE-22
critical
9.8
2024-06-06 CVE-2024-3402 Cross-site Scripting vulnerability in Gaizhenbiao Chuanhuchatgpt
A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to inadequate sanitization and validation of model output data.
network
low complexity
gaizhenbiao CWE-79
5.4
2024-06-06 CVE-2024-3404 Unspecified vulnerability in Gaizhenbiao Chuanhuchatgpt
In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper access control mechanisms.
network
low complexity
gaizhenbiao
6.5
2024-06-06 CVE-2024-5278 Unspecified vulnerability in Gaizhenbiao Chuanhuchatgpt
gaizhenbiao/chuanhuchatgpt is vulnerable to an unrestricted file upload vulnerability due to insufficient validation of uploaded file types in its `/upload` endpoint.
network
low complexity
gaizhenbiao
6.1