cbcvebase.
CVE-2024-10707
published 2025-03-20

CVE-2024-10707: gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a…

PriorityP342medium6.5CVSS 3.0
AVNACLPRLUINSUCHINAN
EPSS
0.67%
47.3th percentile
gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue (CVE-2024-4941). This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a specially crafted JSON file and exploiting the improper input validation in the handle_dataset_selection function.

Affected

2 ranges
VendorProductVersion rangeFixed in
gaizhenbiaochuanhuchatgpt——
gaizhenbiaogaizhenbiao_chuanhuchatgptunspecified – latest—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.