CVE-2024-6037
1 advisory.
PyPI/chuanhuchatgpt CVE-2024-6037: critical 9.1
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to unc
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 20240410 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-317
- https://github.com/gaizhenbiao/chuanhuchatgpt/commit/71cb89c4c948dae5aaa0ae64b98f98e3965bdb37
- https://huntr.com/bounties/eca6904f-f9fd-40c8-9e85-96f54daf405e
CVE-2024-6037 · published · modified · JSON