.. / CVE-2024-27564

Exploit for ChatGPT个人专用版 - Server Side Request Forgery (CVE-2024-27564)

Description:

A Server-Side Request Forgery (SSRF) in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter.

Nuclei Template

View the template here CVE-2024-27564.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-27564.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2024-27564
https://github.com/dirk1983/chatgpt/issues/114