{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"20240121"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-2217"],"ecosystem":"PyPI","epss":0.00785,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGN3THCJ8S9GWRHD8SRMQE","modified_at":"2026-07-13T07:15:20.080849161Z","published_at":"2024-04-10T17:15:54.440Z","references":["https://osv.dev/vulnerability/PYSEC-2024-316","https://github.com/gaizhenbiao/chuanhuchatgpt/commit/c5ae3b5ae6b47259e0ce8730e0a47e85121f4a7d","https://huntr.com/bounties/e4df74bf-b2ee-490f-a9c9-e5c8010b8b29"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-316","url":"https://osv.dev/vulnerability/PYSEC-2024-316"}],"summary":"gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated ver"}