Arbitrary File Read in chuanhuChatGPT Load Prompt Template

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: Arbitrary File Read via Insufficient Validation in Load Prompt template in gaizhenbiao/chuanhuchatgpt - Report Date: July 14, 2024 - Verification Status: Verified - Vulnerability Type: CWE-29: Path Traversal: - Severity: High (7.5) 2. Exploitation: - Exploitation Steps: 1. Log in to chuanhuChat. 2. Navigate to Conversation → Load Prompt Template → Select Prompt Template Collection File → Select and intercept the request to modify the file path to "C:[file]" to read a specific file. 3. In the "Load from Prompt Template" section, select a part; the second part will appear in the returned queue/data interface. 3. Impact: - The vulnerability allows reading of format-compliant files, including code and log files. - Log files may contain highly sensitive information, such as account credentials. 4. Location of Vulnerability: - File: utils.py L513-L533 5. Remediation: - Remediation Status: Fixed 表 - Fixer: Chuan Hu - Fix Date: August 18, 2024 6. Disclosure: - Disclosure Bounty: $450 - Disclosure Status: Disclosed 7. Discoverer: - Discoverer: web-hacker-team 8. Vulnerability Rating: - Rating: High (7.5) This information provides detailed insights into the vulnerability, including its description, exploitation method, impact, location, remediation status, disclosure details, discoverer, and rating.

Goal Reached Thanks to every supporter — we hit 100%!

Arbitrary File Read in chuanhuChatGPT Load Prompt Template