Skip to content
OpenAdvisories

Vendor

imartinez

9 known vulnerabilities.

Products

imartinez/privategpt 9
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.7
    CVE-2024-8029

    Stored XSS in imartinez/privategpt

    An XSS vulnerability was discovered in the upload file(s) process of imartinez/privategpt v0.5.0. Attackers can upload malicious SVG files, which execute JavaScript when victims click on the file link. This can lead to user data theft, session hijacking, malw…

    imartinez imartinez/privategpt
  • Medium 5.4
    CVE-2024-5935

    CSRF Vulnerability in imartinez/privategpt

    A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users.

    imartinez imartinez/privategpt
  • Medium 4.3
    CVE-2024-5936 Scanner template EPSS 30%

    Open Redirect in imartinez/privategpt

    An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or saniti…

    imartinez imartinez/privategpt
  • Medium 6.8
    CVE-2024-3851

    Unrestricted File Upload Leading to XSS in imartinez/privategpt

    A stored Cross-Site Scripting (XSS) vulnerability exists in the 'imartinez/privategpt' repository due to improper validation of file uploads. Attackers can exploit this vulnerability by uploading malicious HTML files, such as those containing JavaScript paylo…

    imartinez imartinez/privategpt