← Back

CVE-2024-8613

nvd nist
Published: Mar 20, 2025Modified: Oct 15, 2025

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, enabling attackers to view and manipulate chat histories of other users.

Affected (1)

Gaizhenbiao
1 product
Chuanhuchatgpt
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chuanhuchatgpt
Version 20240802

Related CWEs

CWE-639
Authorization Bypass Through User-Controlled Key
The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (2)

Source: security@huntr.dev
Patch
Source: security@huntr.dev
ExploitThird Party Advisory

Timeline

No history available yet.