CVE-2024-5935mediumCWE-352

CVE-2024-5935: medium-severity vulnerability in imartinez/privategpt

CSRF Vulnerability in imartinez/privategpt

Published · Updated

Follow this CVE+ Monitor imartinez/privategpt

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.2%
A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users.
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Affected products
imartinez · imartinez/privategpt
Related CVEs — imartinez/privategpt

In the same product, most dangerous first.

CVE-2024-5936MEDIUMOpen Redirect in imartinez/privategptEPSS 30.1%CVE-2024-4343CRITICALPython Command Injection in imartinez/privategptEPSS 2.7%CVE-2024-3403HIGHLocal File Inclusion in imartinez/privategptEPSS 1.1%CVE-2024-12063HIGHDenial of Service in imartinez/privategptEPSS 0.8%CVE-2024-8018HIGHDenial of Service (DOS) in imartinez/privategptEPSS 0.6%CVE-2024-8029MEDIUMStored XSS in imartinez/privategptEPSS 0.4%