Vulnerability Details CVE-2024-5935
A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 14.1%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2024-5935
-
cpe:2.3:a:pribai:privategpt:0.5.0