tocsin

CVE-2024-6255

1 advisory.

PyPI/chuanhuchatgpt CVE-2024-6255: critical 9.1, EPSS 13.66%

A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.j

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2024-6255 · published · modified · JSON