A
vulnerability, which was classified as problematic, has been found in Chanzhaoyu chatgpt-web 2.11.1. This issue affects some unknown processing. The manipulation of the argument Description with the input <image src onerror=prompt(document.domain)> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249779.
References
| Link | Resource |
|---|---|
| https://github.com/Chanzhaoyu/chatgpt-web/issues/2001 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.249779 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.249779 | Permissions Required Third Party Advisory VDB Entry |
| https://github.com/Chanzhaoyu/chatgpt-web/issues/2001 | Exploit Issue Tracking |
| https://vuldb.com/?ctiid.249779 | Permissions Required Third Party Advisory VDB Entry |
| https://vuldb.com/?id.249779 | Permissions Required Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 08:45
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
| References | () https://github.com/Chanzhaoyu/chatgpt-web/issues/2001 - Exploit, Issue Tracking | |
| References | () https://vuldb.com/?ctiid.249779 - Permissions Required, Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.249779 - Permissions Required, Third Party Advisory, VDB Entry |
Information
Published : 2024-01-08 02:15
Updated : 2024-11-21 08:45
NVD link : CVE-2023-7215
Mitre link : CVE-2023-7215
CVE.ORG link : CVE-2023-7215
JSON object : View
Products Affected
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')