CVE-2024-5936: Open Redirect in imartinez/privategpt

Record summary

CVE-2024-5936 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware distribution, and credential theft.

Description source: CVE List

Exploitation context

Available material

Nuclei templates: 1

CISA SSVC decision

ExploitationPoC

AutomatableNo

Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 25, 2024 · Source: CVE List

Affected products and versions

Product	Source	Version range	Status
imartinez/privategpt Browse imartinez / imartinez/privategpt Default status: unknown	CVE List	Through latest	affected
	CVE List	Through 0.5.0	affected

Nuclei templates

ProjectDiscoveryMEDIUMPrivateGPT < 0.5.0 - Open RedirectCVSS 4.3

Impact

Attackers can craft malicious URLs with the file parameter to redirect users to attacker-controlled sites, potentially leading to phishing attacks or credential theft.

Remediation

Update PrivateGPT to version 0.5.1 or later to address the open redirect vulnerability.

WeaknessesCWE-601

Authorsctflearner

Template tagscve2024cveprivate-gptredirectvulnai

CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Shodan: html:"private gpt"

https://huntr.com/bounties/43f05c1e-d7b8-45e2-b1fe-48faf1e3a48d https://drive.google.com/file/d/1Fw5eT-9bAqsqzNUqdTXebtqIo5NI6T48/view https://nvd.nist.gov/vuln/detail/CVE-2024-5936

Source: ProjectDiscovery

References

huntr.com

https://huntr.com/bounties/43f05c1e-d7b8-45e2-b1fe-48faf1e3a48d

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-5936