CVE-2024-8029
Stored XSS in imartinez/privategpt
概要
Stored XSS in imartinez/privategpt
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An XSS vulnerability was discovered in the upload file(s) process of imartinez/privategpt v0.5.0. Attackers can upload malicious SVG files, which execute JavaScript when victims click on the file link. This can lead to user data theft, session hijacking, malware distribution, and phishing attacks.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web huntr.com