A Cross-Site Request Forgery (CSRF) vulnerability in version 3.83 of binary-husky/gpt_academic allows an attacker to trick a user into uploading files without their consent, exploiting their session. This can lead to unauthorized file uploads and potential system compromise. The uploaded file can contain malicious scripts, leading to stored Cross-Site Scripting (XSS) attacks. Through stored XSS, an attacker can steal information about the victim and perform any action on their behalf.
References
| Link | Resource |
|---|---|
| https://huntr.com/bounties/45270c4b-a500-4374-a90b-37b604a3ace0 | Exploit Third Party Advisory |
Configurations
History
14 Jul 2025, 15:05
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://huntr.com/bounties/45270c4b-a500-4374-a90b-37b604a3ace0 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:binary-husky:gpt_academic:3.83:*:*:*:*:*:*:* | |
| First Time |
Binary-husky
Binary-husky gpt Academic |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
20 Mar 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 10:15
Updated : 2025-07-14 15:05
NVD link : CVE-2024-10819
Mitre link : CVE-2024-10819
JSON object : View
Products Affected
binary-husky
- gpt_academic
CWE
CWE-352
Cross-Site Request Forgery (CSRF)