https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:38:56 +0000 https://cve.radiocsirt.org/vuln/cve-2024-8143 <p><strong>Affected:</strong> gaizhenbiao/chuanhuchatgpt, gaizhenbiao chuanhuchatgpt</p> <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> <p><strong>Affected:</strong> gaizhenbiao/chuanhuchatgpt, gaizhenbiao chuanhuchatgpt</p> <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> https://cve.radiocsirt.org/vuln/cve-2024-8143