https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 16:56:27 +0000 https://cve.radiocsirt.org/vuln/cve-2024-3404 <p><strong>Affected:</strong> gaizhenbiao/chuanhuchatgpt, gaizhenbiao chuanhuchatgpt</p> <p>In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper access control mechanisms. This flaw allows an authenticated attacker to bypass intended access restrictions and read the `history` files of other users, potentially leading to unauthorized access to sensitive information. The vulnerability is present in the application&#39;s handling of access control for the `history` path, where no adequate mechanism is in place to prevent an authenticated user from accessing another user&#39;s chat history files. This issue poses a significant risk as it could allow attackers to obtain sensitive information from the chat history of other users.</p> <p><strong>Affected:</strong> gaizhenbiao/chuanhuchatgpt, gaizhenbiao chuanhuchatgpt</p> <p>In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper access control mechanisms. This flaw allows an authenticated attacker to bypass intended access restrictions and read the `history` files of other users, potentially leading to unauthorized access to sensitive information. The vulnerability is present in the application&#39;s handling of access control for the `history` path, where no adequate mechanism is in place to prevent an authenticated user from accessing another user&#39;s chat history files. This issue poses a significant risk as it could allow attackers to obtain sensitive information from the chat history of other users.</p> https://cve.radiocsirt.org/vuln/cve-2024-3404