CVE-2025-2334
274056675 springboot-openai-chatgpt Chat History chat deleteChat access control
- State
- Published
- Severity
- 5.3 Medium
- Published
- Mar 15, 2025
- Updated
- Mar 17, 2025
- Reserved
- Mar 15, 2025
Description
A vulnerability classified as problematic has been found in 274056675 springboot-openai-chatgpt e84f6f5. This affects the function deleteChat of the file /api/mjkj-chat/chat/ai/delete/chat of the component Chat History Handler. The manipulation of the argument chatListId leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 5.4 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L | VulDB |
| 3.0 | 5.4 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L | VulDB |
| 2.0 | 5.5 Medium | AV:N/AC:L/Au:S/C:N/I:P/A:P | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
springboot-openai-chatgpt274056675 |
|
References
- VDB-299799 | 274056675 springboot-openai-chatgpt Chat History chat deleteChat access controlvdb-entrytechnical-description
- VDB-299799 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #505688 | 274056675 Web No version commitID e84f6f5 Improper Access Controlsthird-party-advisory
- https://www.cnblogs.com/aibot/p/18732182exploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.