chuanhuchatgpt vulnerabilities and fixes

Recent CVEs affecting chuanhuchatgpt, with upgrade or downgrade steps. 23 tracked.

chuanhuchatgpt has 23 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-03-20. Highest priority: CVE-2024-5982 (score 69/100).

• CVE-2025-0191 MEDIUM 6.5 DOWNGRADE A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt versio
• CVE-2025-0188 MEDIUM 6.5 DOWNGRADE A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 202409
• CVE-2024-9216 HIGH 8.1 DOWNGRADE An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing an
• CVE-2024-9159 MEDIUM 6.5 DOWNGRADE An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc
• CVE-2024-9107 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecti
• CVE-2024-8613 HIGH 8.8 DOWNGRADE A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete ot
• CVE-2024-8400 MEDIUM 5.4 UPGRADE A stored cross-site scripting (XSS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt
• CVE-2024-8143 MEDIUM 4.3 DOWNGRADE In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that all
• CVE-2024-7962 HIGH 7.5 DOWNGRADE An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient
• CVE-2024-7807 HIGH 7.5 DOWNGRADE A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack
• CVE-2024-6255 HIGH 8.2 DOWNGRADE A vulnerability in the JSON file handling of gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to de
• CVE-2024-6090 HIGH 7.5 DOWNGRADE A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to del
• CVE-2024-6038 HIGH 7.5 DOWNGRADE A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuan
• CVE-2024-6037 CRITICAL 9.1 DOWNGRADE A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders
• CVE-2024-6036 CRITICAL 9.1 DOWNGRADE A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will b
• CVE-2024-6035 MEDIUM 6.1 DOWNGRADE A Stored Cross-Site Scripting (XSS) vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410
• CVE-2024-5982 CRITICAL 9.8 UPGRADE A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt
• CVE-2024-5823 CRITICAL 9.1 UPGRADE A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410
• CVE-2024-5822 CRITICAL 9.8 DOWNGRADE A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/Ch
• CVE-2024-48059 MEDIUM 6.1 UPGRADE gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in W
• CVE-2024-10955 MEDIUM 6.5 DOWNGRADE A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commi
• CVE-2024-10707 MEDIUM 6.5 DOWNGRADE gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the
• CVE-2024-10650 HIGH 7.5 DOWNGRADE An unauthenticated Denial of Service (DoS) vulnerability was identified in ChuanhuChatGPT version 20240918, wh

FAQ

How do I fix chuanhuchatgpt vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is chuanhuchatgpt being exploited right now?

None of the tracked chuanhuchatgpt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which chuanhuchatgpt CVE should I patch first?

CVE-2024-5982 currently ranks highest (69/100): A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt.

RSS feed for chuanhuchatgpt · ← Back to latest CVEs