CVE-2024-3234 Scanner
CVE-2024-3234 Scanner - Directory Traversal vulnerability in Chuanhu Chat
Used 2.6k times · 3.4k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-3234
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio component. The application is designed to restrict user access to resources within the `web_assets` folder. However, the outdated version of gradio it employs is susceptible to path traversal, as identified in CVE-2023-51449. This vulnerability allows unauthorized users to bypass the intended restrictions and access sensitive files, such as `config.json`, which contains API keys. The issue affects the latest version of chuanhuchatgpt prior to the fixed version released on 20240305.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
gaizhenbiao/chuanhuchatgptchuanhuchatgpt
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: gaizhenbiao/chuanhuchatgpt
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →