CVE-2024-5936

6.1 mediumEPSS 30%

Medium (6.1) in pribai privategpt. EPSS 30% chance of exploitation in the next 30 days.

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware distribution, and credential theft.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 30% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2024-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pribai:privategpt

References

https://huntr.com/bounties/43f05c1e-d7b8-45e2-b1fe-48faf1e3a48d
https://huntr.com/bounties/43f05c1e-d7b8-45e2-b1fe-48faf1e3a48d

Check your stack JSON