CVE-2024-12392
CVSS 3.0 Score 6.5 of 10 (medium)
Details
Published Mar 20, 2025
CWE ID 918
Summary
CVE-2024-12392 is a Server-Side Request Forgery (SSRF) vulnerability affecting binary-husky/gpt_academic version git 310122f. The application's functionality to download papers from arxiv.org is impacted, as the URL validation is inadequate. An attacker can exploit this weakness to manipulate the application into accessing any URL, including internal services. This can potentially lead to data exposure, such as accessing AWS metadata credentials, and can escalate local exploits into network-based attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.