CVE-2024-31451

Summary

DocsGPT is a GPT-powered chat for documentation. DocsGPT is vulnerable to unauthenticated limited file write in routes.py. This vulnerability is fixed in 0.8.1.

Affected Software

Weaknesses

• CWE-22: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/arc53/DocsGPT/security/advisories/GHSA-p5qc-vj2x-9rjp
• https://github.com/arc53/DocsGPT/commit/d36f58230a326ecacb9c32a4ae8eac65666044f2
• https://securitylab.github.com/advisories/GHSL-2023-250_DocsGPT

References

• https://github.com/arc53/DocsGPT/security/advisories/GHSA-p5qc-vj2x-9rjp
• https://github.com/arc53/DocsGPT/commit/d36f58230a326ecacb9c32a4ae8eac65666044f2
• https://securitylab.github.com/advisories/GHSL-2023-250_DocsGPT

• ←Previous
• Next→