CVE-2024-27564

2024-03-0500:00:00

mitre

www.cve.org

server-side request forgery

chatgpt

injection

crafted urls

security vulnerability

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

20.2%

JSON

A Server-Side Request Forgery (SSRF) in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter.

References

github.com/dirk1983/chatgpt/issues/114