Read the docs

gaizhenbiao

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

gaizhenbiao records in CISA KEV

No gaizhenbiao vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chuanhuchatgpt 31 records HIGH

Records

32 records

TI-2024-03032 CVE-2024-3234 · GHSA-8q7w-vr6v-q7r2

Path Traversal in gaizhenbiao/chuanhuchatgpt

Priority HIGH 82

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03757 Published 2024-06-06 Fixed in 20240305 CWE-22
TI-2024-05543 CVE-2024-5982 · GHSA-p6jm-98c6-m9x8

Path Traversal in gaizhenbiao/chuanhuchatgpt

Priority HIGH 81

A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.31305 Published 2024-10-29 Fixed in 20240918 CWE-22
TI-2024-05399 CVE-2024-5822 · GHSA-j6c7-m83j-8wqg

Server-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT

Priority HIGH 81

A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00523 Published 2024-06-27 No fix listed CWE-918
TI-2024-05802 CVE-2024-6255 · GHSA-53mw-8pff-677j

Path Traversal in gaizhenbiao/chuanhuchatgpt

Priority HIGH 78

A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to delete any JSON file on the server, including critical configuration files such as `config.json` and `ds_config_…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.13662 Published 2024-07-31 No fix listed CWE-22
TI-2024-05594 CVE-2024-6037 · GHSA-w39g-g6pq-5jq6

Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt

Priority HIGH 78

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.10693 Published 2024-07-10 Fixed in 20240918 CWE-770
TI-2024-05593 CVE-2024-6036 · GHSA-gr5w-hhv9-wjfw

Denial of Service in gaizhenbiao/chuanhuchatgpt

Priority HIGH 78

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.10849 Published 2024-07-10 No fix listed CWE-400
TI-2024-04760 CVE-2024-5124 · GHSA-xgqc-3vhw-cphp

Timing Attack Vulnerability in gaizhenbiao/chuanhuchatgpt

Priority HIGH 74

A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comparison logic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01411 Published 2024-06-06 Fixed in 20240628 CWE-203
TI-2024-09868 CVE-2024-10650 · GHSA-ph84-8v89-25q8

Denial of Service (DoS) in gaizhenbiao/chuanhuchatgpt

Priority HIGH 72

An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00725 Published 2025-03-20 No fix listed CWE-770
TI-2024-07234 CVE-2024-7807 · GHSA-w8g6-73fg-2x53

Denial of Service (DOS) in gaizhenbiao/chuanhuchatgpt

Priority HIGH 72

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0063 Published 2024-10-29 Fixed in 20240918 CWE-770
TI-2024-05645 CVE-2024-6090 · GHSA-v7q8-3xv9-3hv4

Path Traversal Vulnerability in gaizhenbiao/chuanhuchatgpt

Priority HIGH 72

A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00859 Published 2024-06-27 Fixed in 20240918 CWE-22
TI-2024-04207 CVE-2024-4520 · GHSA-84rm-429m-4rw9

Improper Access Control in gaizhenbiao/chuanhuchatgpt

Priority HIGH 72

An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 20240410.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00523 Published 2024-06-04 Fixed in 20240919 CWE-862
TI-2024-04024 CVE-2024-4321 · GHSA-55c5-qvfc-69mh

Local File Inclusion (LFI) in gaizhenbiao/chuanhuchatgpt

Priority HIGH 72

A Local File Inclusion (LFI) vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00597 Published 2024-05-16 No fix listed CWE-20
TI-2024-02059 CVE-2024-2217 · GHSA-5j77-g9r7-hpx3

Improper Access Control in gaizhenbiao/chuanhuchatgpt

Priority HIGH 72

gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00785 Published 2024-04-10 Fixed in 20240310 CWE-284
TI-2024-08552 CVE-2024-9216 · GHSA-g3p7-f346-26m6

Authentication Bypass in gaizhenbiao/ChuanhuChatGPT

Priority HIGH 70

An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.00628 Published 2025-03-20 No fix listed CWE-304
TI-2024-05595 CVE-2024-6038 · GHSA-6w57-8p2p-2r2x

ReDoS Vulnerability in gaizhenbiao/chuanhuchatgpt

Priority HIGH 68

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00657 Published 2024-06-27 Fixed in 20240918 CWE-1333
TI-2025-00150 CVE-2025-0191 · GHSA-hc9x-f65g-gjqh

Denial of Service in gaizhenbiao/chuanhuchatgpt

Priority MEDIUM 62

A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00603 Published 2025-03-20 No fix listed CWE-400
TI-2025-00147 CVE-2025-0188 · GHSA-mc9m-5hw4-g3g6

SSRF in gaizhenbiao/chuanhuchatgpt

Priority MEDIUM 62

A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00492 Published 2025-03-20 No fix listed CWE-918
TI-2024-09922 CVE-2024-10707 · GHSA-grjq-mg5m-r4jj

Local File Inclusion in gaizhenbiao/chuanhuchatgpt

Priority MEDIUM 62

gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941).

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00742 Published 2025-03-20 No fix listed CWE-22
TI-2024-08504 CVE-2024-9159 · GHSA-rxwh-3m8p-2qq5

Incorrect Authorization in gaizhenbiao/chuanhuchatgpt

Priority MEDIUM 62

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0065 Published 2025-03-20 No fix listed CWE-863
TI-2024-03175 CVE-2024-3404 · GHSA-3h92-xgh6-5m97

Improper Access Control in gaizhenbiao/chuanhuchatgpt

Priority MEDIUM 62

In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper access control mechanisms.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00503 Published 2024-06-06 Fixed in 20240919 CWE-863
TI-2024-05592 CVE-2024-6035 · GHSA-rx93-qmpc-rhp9

Stored XSS in gaizhenbiao/chuanhuchatgpt

Priority MEDIUM 60

A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00371 Published 2024-07-11 No fix listed CWE-79
Load more
Open these records in search →