Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1057: Data Access Operations Outside of Expected Data Manager Component

Base Incomplete Mapping prohibited

The product uses a dedicated, central data manager component as required by design, but it contains code that performs data-access operations that do not use this data manager.

Source: MITRE CWE-1057

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-8143

    Unauthorized Access to User Chat History in gaizhenbiao/chuanhuchatgpt

    In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user's …

    gaizhenbiao gaizhenbiao/chuanhuchatgpt chuanhuchatgpt PyPI