Springboot OpenAI ChatGPT Hard-Coded Credentials Vulnerability

A critical vulnerability has been identified in the Springboot OpenAI ChatGPT project, specifically in the commit e84f6f5. The issue arises from hard-coded credentials in the file OpenController.java, located in the chatgpt-boot module. This vulnerability allows remote exploitation without requiring authentication, potentially leading to unauthorized access with administrative privileges.

Impact

Exploitation of this vulnerability allows for unauthorized access to administrative functions, bypassing normal authentication mechanisms.

Reproduction

To reproduce this vulnerability, use the hard-coded phone number '13800138000' and the code '888888' to log into the system. This will grant access to administrator privileges.