CVE-2024-8613

HIGH

Improper Access Control in gaizhenbiao/chuanhuchatgpt

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-8613 has a selected CVSS score of 8.8 (high).

Description

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 20, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

gaizhenbiao/chuanhuchatgpt

Browse gaizhenbiao / gaizhenbiao/chuanhuchatgpt
CVE ListBefore 20240918affected

References

3