CVE-2024-9216
Last modified
CVE-2024-9216 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. EPSS estimates a 0.58% chance of exploitation in the next 30 days.
Description
An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user's username to the get_model function, thereby gaining unauthorized access to that user's chat history.
Metrics
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gaizhenbiao | Chuanhuchatgpt | 2024-12-04 |
References
- https://huntr.com/bounties/21e54c3f-e2d7-423b-9890-1f0cb99af4ddExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-9216?
How severe is CVE-2024-9216?
How do I fix CVE-2024-9216?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-9210The MC4WP: Mailchimp Top Bar plugin for WordPress is vulnera…6.1
- CVE-2024-9211The FULL – Cliente plugin for WordPress is vulnerable to Ref…6.1
- CVE-2024-9212The SKU Generator for WooCommerce plugin for WordPress is vu…6.1
- CVE-2024-9213The افزونه پیامک ووکامرس Persian WooCommerce SMS plugin for …6.1
- CVE-2024-9214The Extra Product Options Builder for WooCommerce plugin for…6.1
- CVE-2024-9215The Co-Authors, Multiple Authors and Guest Authors in an Aut…8.8
- CVE-2024-9217The Currency Switcher for WooCommerce plugin for WordPress i…6.1
- CVE-2024-9218The Magazine Blocks – Blog Designer, Magazine & Newspaper We…6.1
- CVE-2024-9219The WordPress Social Share Buttons plugin for WordPress is v…6.1
- CVE-2024-9220The LH Copy Media File plugin for WordPress is vulnerable to…6.1
- CVE-2024-9221The Tainacan plugin for WordPress is vulnerable to Reflected…6.1
- CVE-2024-9222The Paid Membership Subscriptions – Effortless Memberships, …6.1
Are you affected by CVE-2024-9216?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST