CVE-2024-9159
Incorrect Authorization in gaizhenbiao/chuanhuchatgpt
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Incorrect Authorization in gaizhenbiao/chuanhuchatgpt
An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.
Reserved 2024-09-24 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_aiCWE-863 Incorrect Authorization
huntr.com/bounties/ab0f8fbb-c17a-45a7-8dab-7d4c8b90490a
Support options
