Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-5935 EUVD-2024-47064GHSA-63x4-x48g-vgqg

CSRF Vulnerability in imartinez/privategpt

Published Jun 27, 2024 · Updated Aug 1, 2024 · Assigned by @huntr_ai

Description

A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users.

Affected products

VendorProductAffectedFixed
imartinez imartinez/privategpt unspecified – ≤ latest —

References