Description
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service (DoS), server unavailability, and potential data loss or corruption.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gaizhenbiao | gaizhenbiao/chuanhuchatgpt | unspecified – < 20240918 | 20240918 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | chuanhuchatgpt | <= 20240410 | — | PYSEC-2024-317 |