CVE-2024-9159CWE-863

Incorrect Authorization in gaizhenbiao/chuanhuchatgpt

Medium · published March 20, 2025

CVSS v3.0
6.5
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not properly guarded by an admin check.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-03-20T10:10Z
EPSS history
Timeline
  • 20 MAR 10:10Z
    Incorrect Authorization in gaizhenbiao/chuanhuchatgpt
    cvelistv5