CVE-2024-5982
Gaizhenbiao Chuanhuchatgpt remote code execution
- Published29 Oct 2024
Description
A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the load_chat_history function in modules/models/base_model.py allows arbitrary file uploads, potentially leading to remote code execution (RCE). The get_history_names function in utils.py permits arbitrary directory creation. Additionally, the load_template function in utils.py can be exploited to leak the first column of CSV files. These issues stem from improper sanitization of user inputs concatenated with directory paths using os.path.join.
CVSS 3.1 breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HAffected products
Remediation
Frequently asked
Is CVE-2024-5982 being actively exploited?
CVE-2024-5982 is not in the CISA KEV catalog. Its EPSS exploit probability is 31.3%.
How severe is CVE-2024-5982?
CVE-2024-5982 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 31.3% probability of exploitation.
Which products are affected by CVE-2024-5982?
Affected products include Gaizhenbiao Chuanhuchatgpt.
How do I fix CVE-2024-5982?
Upgrade affected software to a fixed version, for example Gaizhenbiao Chuanhuchatgpt 20240918 or later, then confirm no affected versions remain in your inventory.
How Secuno handles this
Secuno correlates vulnerabilities like CVE-2024-5982 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.
Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.