medium6.5
CVE-2024-9159
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc.
Impact
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gaizhenbiao | Chuanhuchatgpt | Version 2024-12-04 |