CVE-2024-5936: Open Redirect in imartinez/privategpt

Published Jun 27, 2024

Updated

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware distribution, and credential theft.

Affected Software

2 affected components

imartinez privategpt

Pribai Privategpt=0.5.0

Event History

Jun 27, 2024

CVE Published

via MITRE·06:45 PM

Data Sourced

via MITRE·06:45 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-5936?

CVE-2024-5936 is classified as a high severity open redirect vulnerability.

How do I fix CVE-2024-5936?

To fix CVE-2024-5936, ensure proper validation and sanitization of the 'file' parameter to prevent unauthorized redirects.

What systems are affected by CVE-2024-5936?

CVE-2024-5936 affects imartinez/privategpt version 0.5.0.

What kind of attack can CVE-2024-5936 enable?

CVE-2024-5936 enables attackers to redirect users to malicious URLs through unvalidated user input.

How can I check if my application is vulnerable to CVE-2024-5936?

You can check for CVE-2024-5936 by testing your application for unvalidated input in the 'file' parameter.