CVE-2024-5278

CVSS V2 None CVSS V3 None

Description

gaizhenbiao/chuanhuchatgpt is vulnerable to an unrestricted file upload vulnerability due to insufficient validation of uploaded file types in its `/upload` endpoint. Specifically, the `handle_file_upload` function does not sanitize or validate the file extension or content type of uploaded files, allowing attackers to upload files with arbitrary extensions, including HTML files containing XSS payloads and Python files. This vulnerability, present in the latest version as of 20240310, could lead to stored XSS attacks and potentially result in remote code execution (RCE) on the server hosting the application.

Overview

CVE ID
CVE-2024-5278

Assigner
@huntr_ai

Vulnerability Status
PUBLISHED

Published Version
2024-06-06T18:44:51.035Z

Last Modified Date
2024-06-07T17:04:16.938Z

Weakness Enumerations

CWE	URL
CWE-434	http://cwe.mitre.org/data/definitions/434.html

References

Reference URL	Reference Tags
https://huntr.com/bounties/ea821d86-941b-40f3-a857-91f758848e05

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-5278
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5278

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 02:58:54				Added to TrackCVE