CVE-2024-7962 json
Arbitrary File Read via Insufficient Validation in gaizhenbiao/chuanhuchatgpt
published 2024-10-29 2 y ago modified 2026-06-17 4 mo ago also PYSEC-2024-112 , EUVD-2024-0022
- cvss
- 7.5
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.8%
- EPSS 0.8% chance of exploitation in 30 days, percentile 56%
- public exploits
- 0
- none known
Summary
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches specific criteria using an absolute path. The file must not have a .json extension and, except for the first line, every other line must contain commas. This vulnerability allows reading parts of format-compliant files, including code and log files, which may contain highly sensitive information such as account credentials.
Patch / fix
- gaizhenbiao gaizhenbiao/chuanhuchatgpt 20240918
- gaizhenbiao gaizhenbiao\/chuanhuchatgpt 20240918
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 2 y ago
Exploit prediction
0.79% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- huntr.com https://huntr.com/bounties/83f0a8e1-490c-49e7-b334-02125ee0f1b1 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 7.5 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | chuanhuchatgpt | all versions |
no fix listed |
Affected products
- gaizhenbiao gaizhenbiao/chuanhuchatgpt
- gaizhenbiao gaizhenbiao\/chuanhuchatgpt
Classification
References
-
github.com
/gaizhenbiao/chuanhuchatgpt/commit/2836fd1db3efcd5ede63c0e7fbbdf677730dbb51
patch
-
huntr.com
/bounties/83f0a8e1-490c-49e7-b334-02125ee0f1b1
exploit, third-party-advisory, web
Sources
- CVE List CVE-2024-7962
- NVD CVE-2024-7962
- OSV PYSEC-2024-112
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.