ExploitCVE-2024-5823
External Control of File Name or Path (CWE-73)
Summary
A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions <= 20240410. This vulnerability allows an attacker to gain unauthorized access to overwrite critical configuration files within the system. Exploiting this vulnerability can lead to unauthorized changes in system behavior or security settings. Additionally, tampering with these configuration files can result in a denial of service (DoS) condition, disrupting normal system operation.
Impact
The impact of this vulnerability is severe. An attacker can exploit this vulnerability to overwrite critical configuration files, potentially leading to: 1. Unauthorized changes in system behavior or security settings, which could compromise the integrity of the entire system. 2. Denial of Service (DoS) conditions, disrupting normal system operations and affecting availability. 3. Potential for further exploitation by modifying security configurations. The vulnerability has a CVSS v3.1 base score of 9.1 (Critical), with high impact on integrity and availability. It requires no user interaction and can be exploited over the network without authentication, making it relatively easy for attackers to leverage.
Exploitation
One proof-of-concept exploit is available on huntr.com. There is no evidence of proof of exploitation at the moment.
Patch
A patch is available. The vulnerability has been addressed in a commit on GitHub. The patch was added on 2024-10-31, and can be found at: https://github.com/gaizhenbiao/chuanhuchatgpt/commit/720c23d755a4a955dcb0a54e8c200a2247a27f8b
Mitigation
1. Immediately update gaizhenbiao/chuanhuchatgpt to a version newer than 2024-04-10. 2. If immediate patching is not possible, implement strict access controls to limit who can interact with the affected system. 3. Monitor system logs for any suspicious file modification activities. 4. Implement file integrity monitoring on critical configuration files. 5. Use the principle of least privilege for all system accounts and processes. 6. Consider implementing additional network segmentation to isolate vulnerable systems until patching is complete.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Timeline
NVD published the first details for CVE-2024-5823
Feedly found the first article mentioning CVE-2024-5823. See article
Feedly estimated the CVSS score as HIGH
EPSS Score was set to: 0.04% (Percentile: 9.9%)
A CVSS base score of 9.1 has been assigned.