CVE-2024-9309
A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Controller API Server in haotian-liu/llava version v1.2.0 (LLaVA-1.6). This vulnerability allows attackers to exploit the victim Controller API Server's credentials to perform unauthorized web actions or access unauthorized web resources.
Vendor
Product
CWE
Yayın Tarihi
2025-03-20 10:15:47
Güncelleme
2025-07-15 15:46:20
Source Identifier
security@huntr.dev
KEV Date Added
-