CVE-2024-5982

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-5982

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-5982.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-5982

Published

2024-10-29T12:46:24Z

Modified

2026-08-12T03:51:10Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

Path Traversal in gaizhenbiao/chuanhuchatgpt

Details

A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join.

Database specific

{
    "cna_assigner":  "@huntr_ai",
    "cwe_ids":  [
        "CWE-22"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/5xxx/CVE-2024-5982.json"
}

References

Affected packages

Git / github.com/gaizhenbiao/chuanhuchatgpt

Affected ranges

Type

GIT

Repo

https://github.com/gaizhenbiao/chuanhuchatgpt

Events

Introduced

Fixed

952fc8c3cbacead858311747cddd4bedcb4721d7

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:gaizhenbiao:chuanhuchatgpt:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "20240918"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

Other

20230303

20230305

20230317

20230320

20230323

20230327

20230330

20230409

20230413

20230417

20230422

20230427

20230502

20230507

20230513

20230526

20230601

20230614

20230619

20230628

20230709

20230719

20230728

20230809

20230820

20230830

20230911

20230916

20230926

20231006

20231020

20231110

20231215

20231223

20240121

20240305

20240310

20240410

20240628

20240802

20240914

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-5982.json"