1. Home
  2. CVE Database
  3. CVE-2024-10100
HIGH · 7.5

CVE-2024-10100

A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encodi...

Vulnerability Description

A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encoding. This allows attackers to view any file on the host system, including sensitive files such as critical application files, SSH keys, API keys, and configuration values.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Binary-HuskyGpt Academic3.83

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2024-10100?

CVE-2024-10100 is a vulnerability with a CVSS score of 7.5 (HIGH). A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is open to path traversal through URL encodi...

How severe is CVE-2024-10100?

CVE-2024-10100 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-10100?

Check the references section above for vendor advisories and patch information. Affected products include: Binary-Husky Gpt Academic.