CVE-2024-3234

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the webassets folder. However, the outdated version of gradio it employs is susceptible to pa...

CVE-2024-3234

CVE-2024-3234 – Path traversal in gaizhenbiao/chuanhuchatgpt is due to an outdated Gradio component that permits traversal outside the restricted web_assets folder. The NVD/Nuclei/OSV records connect this to CVE-2023-51449 and describe that an attacker could bypass access restrictions and reach s...