随笔分类 -  漏洞报告

springboot-openai-chatgpt IDOR and bussiness logic vuln
摘要：## intro Any user can update the number of questions they are allowed to ask. ## PoC There is no access limitation for users to charge their question 阅读全文
posted @ 2025-02-23 16:22 Aibot 阅读(4) 评论(0) 推荐(0) 编辑
springboot-openai-chatgpt IDOR
摘要：## intro Create a new user while specifying a nonexistent expire field to gain membership privileges. You can learn about the existing fields in the d 阅读全文
posted @ 2025-02-23 16:08 Aibot 阅读(2) 评论(0) 推荐(0) 编辑
springboot-openai-chatgpt bussiness logic vuln
摘要：## intro Least Privilege Violation, control any invitations to refresh the attacker's own balance or create a new account with a specified high number 阅读全文
posted @ 2025-02-23 15:56 Aibot 阅读(3) 评论(0) 推荐(0) 编辑
springboot-openai-chatgpt privilege leakage
摘要：## Intro On the management side, ordinary users experience privilege leakage, allowing them to add new accounts. As a result, they exceed their author 阅读全文
posted @ 2025-02-23 15:45 Aibot 阅读(3) 评论(0) 推荐(0) 编辑
springboot-openai-chatgpt Improper Access Control
摘要：Introduction In the springboot-openai-chatgpt web application, any user can delete another user’s chat history. Proof of Concept (POC) Figures 1 and 2 阅读全文
posted @ 2025-02-23 15:24 Aibot 阅读(3) 评论(0) 推荐(0) 编辑

点击右上角即可分享
微信分享提示