PRODUCT PROFILE

ays-chatgpt-assistant

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2025-620392026/06/25

AI ChatBot with ChatGPT by AYS <= 2.6.6 - Unauthenticated API Key Exposure

AYS AI ChatBot with ChatGPT and Content Generator <= 2.6.6 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve sensitive information, exploit requires crafted input.

ays-chatgpt-assistantPoC 已收录

CVSS—

中危CVE-2024-77142024/03/06

AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls

The plugin lacks sufficient access controls allowing an unauthenticated user to disconnect the plugin from OpenAI, thereby disabling the plugin. Multiple actions are accessible: ays_chatgpt_disconnect, ays_chatgpt_connect, and ays_chatgpt_save_feedback

ays-chatgpt-assistantPoC 已收录

CVSS6.5EPSS 3.2%