S4E just found a high-severity finding from top 10 tcp port service scan

CVE

CVE-2024-5936

6.1

CVSSmedium

Exploitable remotely over the internet · no authentication required · user interaction needed.

Description

An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerability includes potential phishing attacks, malware distribution, and credential theft.

Attack Vector

Network

Privileges Req.

None

User Interaction

Required

imartinez/privategptimartinez_privategpt

Updated Sep 28, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2024-5936 Scanner

CVE-2024-5936 scanner - Open Redirect vulnerability in PrivateGPT

Used 2.9k times · 3.4k assets checked · url

Scanner page →Run scanner

CVE history: imartinez/privategpt

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →