Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-48059
6.1
MEDIUMCVSS v3
Published
November 4, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim accesses this session, the malicious JavaScript is executed in the victim's browser.
GaiZhenbiao/ChuanhuChatGPT
GitHubGUI for ChatGPT API and many LLMs. Supports agents, file-based QA, GPT finetuning and query with web search. All with a neat UI.
GitHubGUI for ChatGPT API and many LLMs. Supports agents, file-based QA, GPT finetuning and query with web search. All with a neat UI.<= 20240802NVD