CVE-2024-9308 — Open Redirect in haotian-liu/llava
An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially c…
Published: 2025-03-20 · CVSS: 6.1 · CVSS 3.0
An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7