CVE-2024-5823: chuanhuchatgpt File Overwrite Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: File Overwrite Vulnerability Leads to Configuration File Tampering and Denial of Service Attack Risk in gaizhenbiao/chuanhuchatgpt - Report Date: Apr 22nd 2024 - Status: Valid 2. Vulnerability Type: - CVE ID: CVE-2024-5823 - Type: CWE-73: External Control of File Name or Path 3. Vulnerability Severity: - Severity: Medium (6.5) 4. Vulnerability Impact: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Confidentiality: None - Integrity: Low - Availability: Low 5. Exploitation: - PoC Code: A PoC code example is provided, demonstrating how to exploit the vulnerability. 6. Impact: - Impact: Attackers can modify critical system files, leading to unauthorized configuration changes, potential denial-of-service attacks, and partial integrity compromise. 7. Discovery and Fix: - Discoverer: iluem - Fixer: Chuan Hu - Fix Status: Fixed 8. Disclosure and Rewards: - Disclosure Date: 5 months ago - Disclosure Reward: $75 - Fix Reward: $18.75 9. Vulnerability Tracking: - CVE ID: CVE-2024-5823 - Status: Published This information provides a detailed description of the vulnerability, its impact scope, and remediation status, aiding in understanding the severity and exploitation method of the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-5823: chuanhuchatgpt File Overwrite Vulnerability