haotian-liu LLaVA Open Redirect Vulnerability

A vulnerability allowing open redirection has been identified in haotian-liu/llava version v1.2.0 (LLaVA-1.6). This vulnerability allows remote, unauthenticated attackers to redirect users to arbitrary websites by using a specially crafted URL. Such exploitation could be used for phishing attacks, distributing malware, or stealing credentials.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of users, potentially causing phishing, malware distribution, or credential theft.