← Database

CVE-2024-5935

MEDIUM CVSS: 5.4 Published: 2024-06-27 Modified: 2026-06-17

Description

A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users.

Affected Platforms

Pribai Privategpt

Weakness Type

CWE-352

References