CVE-2024-5982

CVSS V2 None CVSS V3 None

Description

A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join.

Overview

CVE ID
CVE-2024-5982

Assigner
@huntr_ai

Vulnerability Status
PUBLISHED

Published Version
2024-10-29T12:46:24.726Z

Last Modified Date
2024-10-29T13:47:03.458Z

Weakness Enumerations

CWE	URL
CWE-22	http://cwe.mitre.org/data/definitions/22.html

References

Reference URL	Reference Tags
https://huntr.com/bounties/5d5c5356-e893-44d1-b5ca-642aa05d96bb
https://github.com/gaizhenbiao/chuanhuchatgpt/commit/952fc8c3cbacead858311747cddd4bedcb4721d7

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-5982
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5982

History

Created	Old Value	New Value	Data Type	Notes
2024-10-30 13:31:50				Added to TrackCVE