CVE-2024-6036
Denial of Service in gaizhenbiao/chuanhuchatgpt
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Denial of Service in gaizhenbiao/chuanhuchatgpt
| Assigner | @huntr_ai |
| Reserved | 2024-06-15 |
| Published | 2024-07-10 |
| Updated | 2024-08-01 |
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows any user to restart the server at will by sending a specific request to the `/queue/join?` endpoint with `"fn_index":66`. This unrestricted server restart capability can severely disrupt service availability, cause data loss or corruption, and potentially compromise system integrity.
| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CWE-400 Uncontrolled Resource Consumption
https://huntr.com/bounties/e9eaaea9-5750-4955-9142-2f12ad4b06db
