Lucene search
+L

69 matches found

CNNVD
CNNVD
•added 2025/03/15 12:00 a.m.•16 views

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt that stems from behavioral workflow coercion and could lead to remote attacks...

5.3CVSS4.9AI score0.00489EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/15 12:00 a.m.•21 views

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices architecture based on SpringCloud by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt that stems from a business logic error and could lead to a remote attack...

6.5CVSS6.5AI score0.00446EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/15 12:00 a.m.•21 views

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt, which stems from hard-coded credentials and could lead to remote attacks...

9.8CVSS7.5AI score0.00713EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/03/15 12:00 a.m.•20 views

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices architecture based on SpringCloud by 274056675 Individual Developer. A security vulnerability exists in springboot-openai-chatgpt version e84f6f5, which stems from improper access control and could lead to remote attacks...

9.1CVSS5.5AI score0.00571EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/03/15 12:00 a.m.•7 views

PT-2025-11370

Name of the Vulnerable Software and Affected Versions: springboot-openai-chatgpt version e84f6f5 Description: A problematic issue has been discovered, affecting the deleteChat function of the Chat History Handler component, specifically in the /api/mjkj-chat/chat/ai/delete/chat API endpoint. The...

9.1CVSS0.00571EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/03/15 12:00 a.m.•7 views

PT-2025-11334

Name of the Vulnerable Software and Affected Versions: springboot-openai-chatgpt affected versions not specified Description: A critical issue was found in the software, affecting some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the chatUserID argumen...

6.5CVSS0.00446EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/15 12:00 a.m.•8 views

CVE-2025-2321: Undefined Security Weakness

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be...

6.5CVSS6.2AI score0.00446EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/15 12:00 a.m.•7 views

CVE-2025-2334: Improper Access Control

A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChat of the file /api/mjkj-chat/chat/ai/delete/chat of the component Chat History Handler. The manipulation of the argument chatListId leads to improper access...

9.1CVSS5.6AI score0.00571EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/15 12:00 a.m.•6 views

CVE-2025-2323: Improper Enforcement of Behavioral Workflow

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been declared as problematic. This vulnerability affects the function updateQuestionCou of the file /api/mjkj-chat/chat/mng/update/questionCou of the component Number of Question Handler. The manipulation leads to...

5.3CVSS4.9AI score0.00489EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/15 12:00 a.m.•10 views

CVE-2025-2322: Use of Hard-coded Credentials

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5. It has been classified as critical. This affects an unknown part of the file /chatgpt-boot/src/main/java/org/springblade/modules/mjkj/controller/OpenController.java. The manipulation leads to hard-coded credentials. It is...

9.8CVSS6.8AI score0.00713EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/14 10:15 p.m.•18 views

CVE-2025-2320

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

9.8CVSS5.4AI score0.00713EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/14 10:00 p.m.•5 views

CVE-2025-2320

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

9.8CVSS0.00713EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/03/14 10:00 p.m.•13 views

CVE-2025-2320 274056675 springboot-openai-chatgpt User submit improper authorization

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

7.5CVSS7.2AI score0.00713EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/03/14 10:00 p.m.•50 views

CVE-2025-2320 274056675 springboot-openai-chatgpt User submit improper authorization

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

7.5CVSS0.00713EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/03/14 12:00 a.m.•21 views

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt that stems from improper authorization and could lead to remote attacks...

9.8CVSS7.4AI score0.00713EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/03/14 12:00 a.m.•4 views

PT-2025-11309

Name of the Vulnerable Software and Affected Versions: springboot-openai-chatgpt affected versions not specified Description: A critical vulnerability has been found in springboot-openai-chatgpt, affecting the function submit of the file "/api/blade-user/submit" of the component User Handler. Thi...

9.8CVSS0.00713EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/14 12:00 a.m.•6 views

CVE-2025-2320: Improper Authorization

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

9.8CVSS6.7AI score0.00713EPSS
SaveExploits1References1
The Hacker News
The Hacker News
•added 2024/11/22 6:15 a.m.•10 views

PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python Libraries

Cybersecurity researchers have discovered two malicious packages uploaded to the Python Package Index PyPI repository that impersonated popular artificial intelligence AI models like OpenAI ChatGPT and Anthropic Claude to deliver an information stealer called JarkaStealer. The packages, named...

7AI score
SaveExploits0
NVD
NVD
•added 2024/07/06 5:15 a.m.•30 views

CVE-2024-40594

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...

2.3CVSS0.00141EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/07/06 12:00 a.m.•19 views

CVE-2024-40594

The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...

2.3CVSS6.8AI score0.00141EPSS
SaveExploits0References2
Rows per page
Query Builder