Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-6090
Not yet scoredAwaiting CVSS assessment
Description
A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in `.json` on the target system, leading to a denial of service as users are unable to authenticate.
GaiZhenbiao/ChuanhuChatGPT
GitHubGUI for ChatGPT API and many LLMs. Supports agents, file-based QA, GPT finetuning and query with web search. All with a neat UI.
GitHubGUI for ChatGPT API and many LLMs. Supports agents, file-based QA, GPT finetuning and query with web search. All with a neat UI.= 20240410, <= 20240410NVD