CVE-2024-10812

MEDIUM NUCLEI

binary-husky gpt_academic 3.83 - Open Redirect via File Parameter

Title source: llm

Exploitation Summary

CVE-2024-10812 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in the 'file' parameter without proper validation or sanitization. This can be exploited by attackers to conduct phishing attacks, distribute malware, and steal user credentials.

Nuclei Templates (1)

GPT Academic v1.3.9 - Open Redirect

MEDIUMVERIFIEDby DhiyaneshDK

FOFA: body="gpt_academic"

References (1)

Core 1

Core References

Exploit, Third Party Advisory

https://huntr.com/bounties/51408ebd-e0be-489d-8088-f210087dbd6a

Scores

CVSS v3 6.1

EPSS 0.0054

EPSS Percentile 41.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-601

Status published

Products (1)

binary-husky/gpt_academic 3.83

Published Mar 20, 2025

Tracked Since Feb 18, 2026