CVE-2024-10986: falha de alta gravidade em binary-husky/gpt_academic
Local File Read (LFI) by Tarslip Symlink via arxiv_download() API in binary-husky/gpt_academic
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 0.8%
GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org. Despite implementing protections against path traversal, the application overlooks the Tarslip triggered by symlinks. This oversight allows attackers to read arbitrary local files from the victim server.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
binary-husky · binary-husky/gpt_academicCVEs relacionadas — binary-husky/gpt_academic
No mesmo produto, das mais perigosas para as menos.
CVE-2024-11039HIGHDeserialization of Untrusted Data in binary-husky/gpt_academicEPSS 2.1%CVE-2024-12389HIGHPath Traversal in binary-husky/gpt_academicEPSS 1.7%CVE-2024-12390HIGHRemote Code Execution in binary-husky/gpt_academicEPSS 1.7%CVE-2024-10954HIGHPrompt Injection Leading to RCE in binary-husky/gpt_academic Plugin `manim`EPSS 1.5%CVE-2024-10950HIGHCode Injection in binary-husky/gpt_academicEPSS 1.5%CVE-2024-11037MEDIUMPath Traversal in binary-husky/gpt_academicEPSS 1.1%