Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-5935

CSRF Vulnerability in imartinez/privategpt

Description

A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

imartinez imartinez/privategpt

  • unspecified to ≤ latestaffected

References