CVE-2024-10812

An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in the 'file' parameter without proper validation or sanitization. This can be exploited by attackers to conduct phishing attacks, distribute malware, and steal user credentials.

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.57% chance of exploitation in the next 30 days, 45th percentile

Nuclei

medium

Published

2025-03-20

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10812.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2024-10811
• CVE-2024-10815
• CVE-2024-10810
• CVE-2024-10818
• CVE-2024-10809
• CVE-2024-10821