CVE-2024-9308
An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Vendor
Product
CWE
Yayın Tarihi
2025-03-20 10:15:47
Güncelleme
2025-07-15 15:46:41
Source Identifier
security@huntr.dev
KEV Date Added
-