CVE-2024-8143

CVE-2024-8143 affects gaizhenbiao/chuanhuchatgpt version 20240628, allowing authenticated users to access other users' chat histories. The vulnerability lies in the /file endpoint, which permits enumeration and access to files within other user directories created upon login. This medium-severity vulnerability (CVSS 4.3) requires low privileges and network access, with low attack complexity, resulting in unauthorized disclosure of sensitive chat data. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.