Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-5936

Опубликовано: 27 июн. 2024
Источник: nvd
CVSS3: 4.3
CVSS3: 6.1
EPSS Низкий

Описание

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware distribution, and credential theft.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pribai:privategpt:0.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02321
Низкий

4.3 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.3
github
больше 1 года назад

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware distribution, and credential theft.

EPSS

Процентиль: 84%
0.02321
Низкий

4.3 Medium

CVSS3

6.1 Medium

CVSS3

Дефекты

CWE-601