CyberRota Analysis
AI-GeneratedDocsGPT versions up to 0.20.0 are vulnerable due to improper validation of sender origins in the callback-status endpoint, allowing attackers to exploit OAuth connector session tokens. This vulnerability can lead to unauthorized access to user accounts and the ability to disconnect cloud storage connectors, potentially compromising sensitive data. Organizations using DocsGPT should prioritize patching this vulnerability to safeguard user accounts and maintain data integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to disconnect victims' cloud storage connectors.