CVE-2024-9308

Name of the Vulnerable Software and Affected Versions haotian-liu/llava version v1.2.0

Description A remote unauthenticated attacker can redirect users to arbitrary websites via a specially crafted URL, potentially leading to phishing attacks, malware distribution, and credential theft.

Recommendations For haotian-liu/llava version v1.2.0, consider restricting access to the vulnerable URL redirection mechanism until a patch is available. As a temporary workaround, avoid using specially crafted URLs that may lead to unauthorized redirects.