Vulnerability CVE-2024-27564


Published: 2024-03-05

Description:
A Server-Side Request Forgery (SSRF) in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter.

 References:
https://github.com/dirk1983/chatgpt/issues/114

Copyright 2026, cxsecurity.com

 

Back to Top