CVE-2024-10812 PoC — GPT Academic 输入验证错误漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10812.yaml

Associated Vulnerability

Title:GPT Academic 输入验证错误漏洞 (CVE-2024-10812)
Description:GPT Academic是binary-husky个人开发者的一个为 GPT/GLM 等 LLM 大语言模型提供实用化交互的接口。 GPT Academic 3.83版本存在输入验证错误漏洞，该漏洞源于用户重定向到用户控制的file参数指定的URL时未进行适当的验证或清理，可能导致钓鱼攻击、恶意软件分发和用户凭据窃取。

Description

An open redirect vulnerability exists in GPT Academic v1.3.9, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs.

File Snapshot


 id: CVE-2024-10812

info:
  name: GPT Academic v1.3.9 - Open Redirect
  author: DhiyaneshDK
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!