CVE-2024-12388
CVSS 3.0 Score 6.5 of 10 (medium)
Details
Published Mar 20, 2025
CWE ID 115
Summary
CVE-2024-12388 refers to a vulnerability in the gpt_academic software by binary-husky, version 310122f. This issue allows for a Regular Expression Denial of Service (ReDoS) attack. An attacker can craft input that requires the application to perform polynomial time computations to match the regular expression. As a result, the server becomes unresponsive, rendering it incapable of handling any requests from other users. This vulnerability poses a significant threat to the availability and performance of affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.