High severity7.5NVD Advisory· Published Jun 27, 2024· Updated Jun 17, 2026

CVE-2024-6090

Description

A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any files ending in .json on the target system, leading to a denial of service as users are unable to authenticate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Gaizhenbiao/Chuanhuchatgptllm-fuzzy2 versions
=20240410+ 1 more
- (no CPE)range: =20240410
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4cnvdExploitThird Party Advisory
github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000