PyPI/chuanhuchatgpt CVE-2024-7962: high 7.5, EPSS 0.79%
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-112
- https://huntr.com/bounties/83f0a8e1-490c-49e7-b334-02125ee0f1b1
- https://github.com/gaizhenbiao/chuanhuchatgpt/commit/2836fd1db3efcd5ede63c0e7fbbdf677730dbb51
CVE-2024-7962 · published · modified · JSON