Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Server-Side Request Forgery (SSRF) in gaizhenbiao/ChuanhuChatGPT
Vulnerability Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attackers to send crafted requests from the vulnerable server to internal or external resources, potentially bypassing security controls and accessing sensitive data.
CVSS Information
N/A
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
ChuanhuChatGPT 代码问题漏洞
Vulnerability Description
ChuanhuChatGPT是为ChatGPT/ChatGLM/LLaMA/StableLM/MOSS等多种LLM提供了一个轻快好用的Web图形界面。 ChuanhuChatGPT 20240410及之前版本存在代码问题漏洞，该漏洞源于上传处理接口存在服务器端请求伪造漏洞，允许攻击者从存在漏洞的服务器向内部或外部资源发送精心设计的请求，从而可能绕过安全控制并访问敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A