Vendor
haotian-liu
8 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.1
Open Redirect in haotian-liu/llava
An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and …
-
Medium 6.1
Cross-Site Request Forgery to XSS in haotian-liu/llava
A Cross-Site Request Forgery (CSRF) vulnerability in haotian-liu/llava v1.2.0 (LLaVA-1.6) allows an attacker to upload files with malicious content without authentication or user interaction. The uploaded file is stored in a predictable path, enabling the att…