We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim accesses this session, the malicious JavaScript is executed in the victim's browser.
Reserved 2024-10-08 | Published 2024-11-04 | Updated 2024-11-05 | Assigner mitrerumbling-slice-eb0.notion.site/...chatgpt-104e3cda9e8c80b4b611dfc491c488d8?pvs=4
gist.github.com/AfterSnows/c5a4cb029fb9142be5c54e531a9a240e
Support options
