CVE-2024-3234

CRITICALNuclei

Path Traversal in gaizhenbiao/chuanhuchatgpt

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-3234 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs is susceptible to path traversal, as identified in CVE-2023-51449. This vulnerability allows unauthorized users to bypass the intended restrictions and access sensitive files, such as `config.json`, which contains API keys. The issue affects the latest version of chuanhuchatgpt prior to the fixed version released on 20240305.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 7, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

chuanhuchatgpt

Browse gaizhenbiao / chuanhuchatgpt

Default status: unknown

CVE ListBefore 20240305affected

gaizhenbiao/chuanhuchatgpt

Browse gaizhenbiao / gaizhenbiao/chuanhuchatgpt
CVE ListBefore 20240305affected

Nuclei templates

1
ProjectDiscoveryCRITICALChuanhu Chat - Directory TraversalCVSS 9.8

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs is susceptible to path traversal, as identified in CVE-2023-51449. This vulnerability allows unauthorized users to bypass the intended restrictions and access sensitive files, such as `config.json`, which contains API keys. The issue affects the latest version of chuanhuchatgpt prior to the fixed version released on 20240305.

Impact

Unauthenticated attackers can exploit path traversal to access sensitive files including API keys in config.json.

Remediation

Update chuanhuchatgpt to the fixed version released on 20240305 or later.

WeaknessesCWE-22
AuthorsDhiyaneshDk
Template tagscvecve2024chuanhuchatgptlfivulnai
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:gaizhenbiao:chuanhuchatgpt:*:*:*:*:*:*:*:*

Source: ProjectDiscovery

References

3