CVE-2024-27564
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2024-27564. We'll provide specific mitigation strategies based on your environment and risk profile.
CVSS Score
V3.1EPSS Score
v2025.03.14There is a 91.8% chance that this vulnerability will be exploited in the wild within the next 30 days.
Attack Vector Metrics
Impact Metrics
Description
pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references section has an archived copy of pictureproxy.php from its original GitHub location, but the repository name might later change because it is misleading.
Available Exploits
ChatGPT个人专用版 - Server Side Request Forgery
A Server-Side Request Forgery (SSRF) in pictureproxy.php of ChatGPT commit f9f4bbc allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the urlparameter.
Related News
According to a blog post by researchers from the cybersecurity company Veriti, a critical vulnerability in ChatGPT could be used by cybercrooks to gain unauthorized access to sensitive information. The flaw, CVE-2024-27564, could pose a risk to businesses tha…
According to a blog post by researchers from the cybersecurity company Veriti, a critical vulnerability in ChatGPT could be used by cybercrooks to gain unauthorized access to sensitive information. The flaw, CVE-2024-27564, could pose a risk to businesses tha…
Threat actors exploit a server-side request forgery (SSRF) flaw, tracked as CVE-2024-27564, in ChatGPT, to target US financial and government organizations. Cybersecurity firm Veriti reports that threat actors are exploiting a server-side request forgery (SSR…
A newly disclosed server-side request forgery (SSRF) vulnerability, tracked as CVE-2024-27564, has become a significant target for cybercriminals, The post CVE-2024-27564: Attackers Exploit OpenAI Vulnerability in the Wild appeared first on Cybersecurity News.
In its latest research report, cybersecurity firm Veriti has spotted active exploitation of a vulnerability within OpenAI’s ChatGPT…
Affected Products
Affected Versions:
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
References
Advisory provided by GitHub Security Advisory Database. Published: March 5, 2024, Modified: March 20, 2025