CVE-2024-10819
CVSS 3.0 Score 7.1 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 352
Summary
CVE-2024-10819 is a Cross-Site Request Forgery (CSRF) vulnerability affecting version 3.83 of binary-husky/gpt_academic. This issue allows attackers to manipulate users into uploading files without consent, exploiting their sessions. Potential consequences include unauthorized file uploads and potential system compromise. Malicious scripts embedded in uploaded files can trigger stored Cross-Site Scripting (XSS) attacks, enabling attackers to steal user information and perform actions on their behalf.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.