https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:54:38 +0000 https://cve.radiocsirt.org/vuln/cve-2024-9216 <p><strong>Affected:</strong> gaizhenbiao/chuanhuchatgpt</p> <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> <p><strong>Affected:</strong> gaizhenbiao/chuanhuchatgpt</p> <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> https://cve.radiocsirt.org/vuln/cve-2024-9216