Local File Read (LFI) by Tarslip Symlink via arxiv_download() API in binary-husky/gpt_academic

GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org. Despite implementing protections against path traversal, the application overlooks the Tarslip triggered by symlinks. This oversight allows attackers to read arbitrary local files from the victim server.

N/A

在文件访问前对链接解析不恰当(链接跟随)

GPT Academic 输入验证错误漏洞

GPT Academic是binary-husky个人开发者的一个为 GPT/GLM 等 LLM 大语言模型提供实用化交互的接口。 GPT Academic 3.83版本存在输入验证错误漏洞，该漏洞源于HotReload功能中的本地文件读取漏洞，可能导致任意本地文件读取。

N/A

N/A