CVE-2024-2217

gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` file. This vulnerability is present in both authenticated and unauthenticated versions of the application, enabling attackers to obtain sensitive information such as API keys (`openai_api_key`, `google_palm_api_key`, `xmchat_api_key`, etc.), configuration details, and user credentials. The issue stems from the application's handling of HTTP requests for the `config.json` file, which does not properly restrict access based on user authentication.

• CWE-284

• https://github.com/gaizhenbiao/chuanhuchatgpt/commit/c5ae3b5ae6b47259e0ce8730e0a47e85121f4a7dPatch
• https://huntr.com/bounties/e4df74bf-b2ee-490f-a9c9-e5c8010b8b29Exploit, Third Party Advisory
• https://github.com/gaizhenbiao/chuanhuchatgpt/commit/c5ae3b5ae6b47259e0ce8730e0a47e85121f4a7dPatch
• https://huntr.com/bounties/e4df74bf-b2ee-490f-a9c9-e5c8010b8b29Exploit, Third Party Advisory

Published

Apr 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-22164In Splunk Enterprise Security (ES) versions below 7.1.2, an …4.3
• CVE-2024-22165In Splunk Enterprise Security (ES) versions lower than 7.1.2…6.5
• CVE-2024-22166Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-22167A potential DLL hijacking vulnerability in the SanDisk Priva…7.9
• CVE-2024-22168A Cross-Site Scripting (XSS) vulnerability on the My Cloud, …5.9
• CVE-2024-22169WD Discovery versions prior to 5.0.589 contain a misconfigur…7.1
• CVE-2024-22170Improper Restriction of Operations within the Bounds of a Me…9.2
• CVE-2024-22177in OpenHarmony v3.2.4 and prior versions allow a local attac…5.5
• CVE-2024-22178A file write vulnerability exists in the OAS Engine Save Sec…4.9
• CVE-2024-22179The application is vulnerable to an unauthenticated paramete…8.7
• CVE-2024-2218The LuckyWP Table of Contents WordPress plugin through 2.1.4…4.6
• CVE-2024-22180in OpenHarmony v4.0.0 and prior versions allow a local attac…5.5