CVE-2024-27564: SSRF
pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references section has an archived copy of pictureproxy.php from its original GitHub location, but the repository name might later change because it is misleading.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27564?
CVE-2024-27564 is classified as a high severity vulnerability due to its potential to exploit server-side request forgery.
How do I fix CVE-2024-27564?
To fix CVE-2024-27564, update to the latest version of ChatGPT that addresses this vulnerability.
What impact does CVE-2024-27564 have on affected applications?
CVE-2024-27564 allows attackers to send arbitrary requests from the server, which can lead to data leaks or further exploitation.
Which versions are affected by CVE-2024-27564?
CVE-2024-27564 affects version 2023-05-23 of ChatGPT.
Is CVE-2024-27564 easy to exploit?
CVE-2024-27564 can be easily exploited if the application improperly handles URL inputs.