Description
ChatGPT-NextChat是一个用于快速部署私人 ChatGPT 网页应用的项目。ChatGPT-NextChat存在服务器请求伪造漏洞，此漏洞是程序未充分验证用户输入api\cors\http端口的数据所导致的。
ChatGPT-NextChat CVE-2023-49785 服务器请求伪造漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-49785
https://github.com/advisories/GHSA-qf3q-9f3h-cjp9
https://www.anquanke.com/post/id/293868
https://www.cnblogs.com/hetianlab/p/18177961
https://www.tenablecloud.cn/plugins/was/114306
https://blog.csdn.net/2301_80127209/article/details/139805335
https://www.hnitns.com/index.php?id=208
https://www.unisyue.com/Service_Support/31/tzk/ldtz/1875.html
https://cn-sec.com/archives/tag/nextchat
https://xsx.tw/exploit/3484/
https://rivers.chaitin.cn/blog/cq94gih0lnechd243ajg