CVE-2024-5935CWE-352

CSRF Vulnerability in imartinez/privategpt

Medium · published June 27, 2024

CVSS v3.0
5.4
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users.

The record
Technical detail
CVSS v3.0
5.4 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2024-06-27T18:45Z
EPSS history
Timeline
  • 27 JUN 18:45Z
    CSRF Vulnerability in imartinez/privategpt
    cvelistv5