TI-2024-03032 Aliases CVE-2024-3234 GHSA-8q7w-vr6v-q7r2

Path Traversal in gaizhenbiao/chuanhuchatgpt

HIGH 82CWE-22Published 2024-06-06 · Updated 2024-08-01

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs is susceptible to path traversal, as identified in CVE-2023-51449. This vulnerability allows unauthorized users to bypass the intended restrictions and access sensitive files, such as `config.json`, which contains API keys. The issue affects the latest version of chuanhuchatgpt prior to the fixed version released on 20240305.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.03757 89th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed gaizhenbiao/chuanhuchatgpt (gaizhenbiao): 20240305

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
gaizhenbiao	gaizhenbiao/chuanhuchatgpt	before 20240305	20240305	Patch available	CNA

gaizhenbiao/chuanhuchatgpt Vendorgaizhenbiao Affected before 20240305 Fixed in 20240305 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:gaizhenbiao:chuanhuchatgpt::::::::	before 20240305	Vulnerable	gaizhenbiao

cpe:2.3:a:gaizhenbiao:chuanhuchatgpt:*:*:*:*:*:*:*:* Versions before 20240305 Vulnerable ·gaizhenbiao

Remediation

Fix · CNA gaizhenbiao/chuanhuchatgpt (gaizhenbiao) Fixed in 20240305

Timeline

2026-10-02 Threatist record created from CVE-2024-3234
2026-10-03 Alias added: GHSA-8q7w-vr6v-q7r2

References

Exploit 1

https://huntr.com/bounties/277e3ff0-5878-4809-a4b9-73cdbb70dc9f

Patch 1

https://github.com/gaizhenbiao/chuanhuchatgpt/commit/6b8f7db347b390f6f8bd07ea2a4ef01a47382f00

TI-2024-05543 Path Traversal in gaizhenbiao/chuanhuchatgpt CVSS 3.1CRITICAL 9.8
TI-2024-05399 Server-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT CVSS 3.1CRITICAL 9.8
TI-2024-05802 Path Traversal in gaizhenbiao/chuanhuchatgpt CVSS 3.1CRITICAL 9.1
TI-2024-05594 Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt CVSS 3.1CRITICAL 9.1
TI-2024-05593 Denial of Service in gaizhenbiao/chuanhuchatgpt CVSS 3.1CRITICAL 9.1
TI-2024-05400 File Overwrite Vulnerability in gaizhenbiao/chuanhuchatgpt CVSS 3.1CRITICAL 9.1

See all 30 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences