PyPI/chuanhuchatgpt CVE-2024-6090: high 7.5, EPSS 0.86%
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any fi
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 20240410 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-319
- https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705
- https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c
CVE-2024-6090 · published · modified · JSON