3 matches found
LocalAI Cross-site Scripting vulnerability
localai =2.20.1 is vulnerable to Cross Site Scripting XSS. When calling the delete model API and passing inappropriate parameters, it can cause a one-time storage XSS, which will trigger the payload when a user accesses the homepage...
6.1CVSS6.3AI score0.00197EPSS
SaveExploits1References6Affected Software1
CVE-2024-48057
CVE-2024-48057 affects LocalAI (version
6.1CVSS6.2AI score0.00197EPSS
SaveExploits1References2Affected Software1
CVE-2024-48057
localai =2.20.1 is vulnerable to Cross Site Scripting XSS. When calling the delete model API and passing inappropriate parameters, it can cause a one-time storage XSS, which will trigger the payload when a user accesses the homepage...
0.00197EPSS
SaveExploits1References2
20