GO-2024-2705

vendorUSosv

LocalAI cross-site request forgery vulnerability in github.com/go-skynet/LocalAI

view advisory published 2024-06-05Licence: per source

LocalAI cross-site request forgery vulnerability in github.com/go-skynet/LocalAI

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-3135US——
A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft malicious webpages that, when visited by a victim, perform u…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan