| عنوان | zhayujie chatgpt-on-wechat (CowAgent) 2.0.4 Unauthenticated Administrative API Access |
|---|
| الوصف | The chatgpt-on-wechat Web Console exposes all administrative HTTP endpoints without any form of authentication or authorization. The HTTP server default, making all endpoints accessible to any client on the network or internet. An unauthenticated attacker can read and modify application configuration (including API keys), connect/disconnect messaging channels, upload arbitrary files, read application logs, and access memory content. |
|---|
| المصدر | ⚠️ https://github.com/zhayujie/chatgpt-on-wechat/issues/2733 |
|---|
| المستخدم | Yu_Bao (UID 89348) |
|---|
| ارسال | 31/03/2026 12:14 PM (3 أشهر منذ) |
|---|
| الاعتدال | 11/04/2026 10:22 PM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 356990 [zhayujie chatgpt-on-wechat CowAgent 2.0.4 Administrative HTTP Endpoint توثيق ضعيف] |
|---|
| النقاط | 19 |
|---|