CVE-2024-6037
Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt
Résumé
Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service (DoS), server unavailability, and potential data loss or corruption.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.com