CVE-2024-5823

Name: CVE-2024-5823
Creator: NVD / NIST
Published: 2024-10-29T13:15:07.38+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.1/10EPSS 0.53%

Last modified Jun 17, 2026

CVE-2024-5823 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. EPSS estimates a 0.53% chance of exploitation in the next 30 days.

Description

A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation.

Metrics

CVSS 3.1

9.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

EPSS Probability

0.53%

40.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Gaizhenbiao	Chuanhuchatgpt	<= 2024-04-10

References

https://github.com/gaizhenbiao/chuanhuchatgpt/commit/720c23d755a4a955dcb0a54e8c200a2247a27f8bPatch
https://huntr.com/bounties/ca361701-7d68-4df6-8da0-caad4b85b9aeExploit, Third Party Advisory

Timeline

Published: Oct 29, 2024
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2024-5823?

How severe is CVE-2024-5823?

CVE-2024-5823 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.53% probability of exploitation in the next 30 days.

How do I fix CVE-2024-5823?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-5823?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST