CSRF in Samuraigpt Embedai
CVE-2024-5185
The EmbedAI application is susceptible to security issues that enable Data Poisoning attacks. This weakness could result in the application becoming compromised, leading to unauthorized entries or data poisoning attacks, which are delivered by a CSRF vulnerability due to the absence of a secure session management implementation and weak CORS policies weakness. An attacker can direct a user to a malicious webpage that exploits a CSRF vulnerability within the EmbedAI application. By leveraging this CSRF vulnerability, the attacker can deceive the user into inadvertently uploading and integrating incorrect data into the application’s language model.
Vulnerability class: CSRF (Cross-Site Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (4.3th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 4th percentile — 4.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Samuraigpt Embedai — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-5185?
- CVE-2024-5185 is a high-severity vulnerability in Samuraigpt Embedai, classified under Cross-Site Request Forgery (CSRF). CVSS score: 7.3/10. Published 2024-05-29.
- How severe is CVE-2024-5185?
- High severity. CVSS v3 base score is 7.3 out of 10.