Lucene search
+L

2 matches found

NVD
NVD
•added 2024/11/04 11:15 p.m.•76 views

CVE-2024-48059

gaizhenbiao/chuanhuchatgpt project, version =20240802 is vulnerable to stored Cross-Site Scripting XSS in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim accesses this session, the malicious JavaScript is executed in the victim's...

6.1CVSS0.00329EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/11/04 12:00 a.m.•6 views

PT-2024-32973

Name of the Vulnerable Software and Affected Versions gaizhenbiao/chuanhuchatgpt project, version =20240802 Description The issue is related to stored Cross-Site Scripting XSS in WebSocket session transmission. An attacker can inject malicious content into a WebSocket message. When a victim...

6.1CVSS5.9AI score0.00329EPSS
SaveExploits1References8
Rows per page
Query Builder