Low
osv
·
GHSA-564p-rx2q-4c8v
BentoML Open Redirect vulnerability
Published Mar 20, 2025
CVSS 3.0
An open redirect vulnerability in bentoml/bentoml v1.3.9 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
Affected AI Products
bentoml