CVE-2024-5982

A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join.

• CWE-22

• https://github.com/gaizhenbiao/chuanhuchatgpt/commit/952fc8c3cbacead858311747cddd4bedcb4721d7Patch
• https://huntr.com/bounties/5d5c5356-e893-44d1-b5ca-642aa05d96bbExploit

Published

Oct 29, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5975The CZ Loan Management WordPress plugin through 1.1 does not…9.1
• CVE-2024-5976A vulnerability was found in SourceCodester Employee and Vis…9.8
• CVE-2024-5977The GiveWP – Donation Plugin and Fundraising Platform plugin…5.4
• CVE-2024-5979In h2oai/h2o-3 version 3.46.0, the `run_tool` command in the…7.5
• CVE-2024-5980A vulnerability in the /v1/runs API endpoint of lightning-ai…9.8
• CVE-2024-5981A vulnerability was found in itsourcecode Online House Renta…9.8
• CVE-2024-5983A vulnerability was found in itsourcecode Online Bookstore 1…9.8
• CVE-2024-5984A vulnerability was found in itsourcecode Online Bookstore 1…9.8
• CVE-2024-5985A vulnerability classified as critical has been found in Sou…8.8
• CVE-2024-5986A vulnerability in h2oai/h2o-3 version 3.46.0.1 allows remot…9.1
• CVE-2024-5987The WP Accessibility Helper (WAH) plugin for WordPress is vu…4.3
• CVE-2024-5988Due to an improper input validation, an unauthenticated thre…9.8