CVE-2024-10101: A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs at the /file endpoint, which…

PriorityP425medium5.4CVSS 3.0

AVNACLPRLUIRSCCLILAN

EPSS

0.32%

24.0th percentile

A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs at the /file endpoint, which renders HTML files. Malicious HTML files containing XSS payloads can be uploaded and stored in the backend, leading to the execution of the payload in the victim's browser when the file is accessed. This can result in the theft of session cookies or other sensitive information.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
binary-husky	binary-husky_gpt_academic	unspecified – latest	—
binary-husky	gpt_academic	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.