CVE-2024-6037
Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt
概要
Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service (DoS), server unavailability, and potential data loss or corruption.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.com