Vulnerability · Published Mar 20, 2025 · Assigned by @huntr_ai
CVE-2024-10812Open Redirect in binary-husky/gpt_academic
Medium 6.1
In plain English
A medium-severity open redirect in binary-husky/gpt_academic from binary-husky. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Official description
An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in the 'file' parameter without proper validation or sanitization. This can be exploited by attackers to conduct phishing attacks, distribute malware, and steal user credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| binary-husky | binary-husky/gpt_academic | unspecified – through latest |
Weakness: CWE-601 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N