VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 27, 2024· Updated Aug 1, 2024

Open Redirect in imartinez/privategpt

CVE-2024-5936

Description

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware distribution, and credential theft.

Affected products

2
  • Zylon/Privategptllm-fuzzy
    Range: =0.5.0
  • imartinez/imartinez/privategptv5
    Range: unspecified

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.