Vulnerabilities > Pribai
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-06-27 | CVE-2024-5935 | Cross-Site Request Forgery (CSRF) vulnerability in Pribai Privategpt 0.5.0 A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. | 5.4 |
| 2024-06-06 | CVE-2024-5186 | Server-Side Request Forgery (SSRF) vulnerability in Pribai Privategpt 0.5.0 A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5.0. | 7.2 |
| 2024-05-16 | CVE-2024-3851 | Cross-site Scripting vulnerability in Pribai Privategpt A stored Cross-Site Scripting (XSS) vulnerability exists in the 'imartinez/privategpt' repository due to improper validation of file uploads. | 5.4 |