PT-2024-16027 · Unknown · Binary-Husky/Gpt Academic

Published 2024-10-17 · Updated 2025-07-11 · CVE-2024-10100

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic version 3.83

Description A path traversal issue exists due to improper handling of the file parameter, which is open to path traversal through URL encoding. This allows attackers to view any file on the host system, including sensitive files such as critical application files, SSH keys, API keys, and configuration values.

Recommendations For binary-husky/gpt academic version 3.83, urgently patch the affected system to prevent exploitation. As a temporary workaround, consider restricting access to the file parameter to minimize the risk of path traversal attacks. Monitor for exploit attempts and apply the patch as soon as possible.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2024-10100

Affected Products

Binary-Husky/Gpt Academic

References · 8

• 🔥 https://huntr.com/bounties/e58a0fb4-2b1d-49ef-b32e-bb62659a6f99 · Exploit
• https://osv.dev/vulnerability/CVE-2024-10100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-10100 · Security Note
• https://twitter.com/CVEnew/status/1846985810245308506 · Twitter Post
• https://twitter.com/oktsec/status/1847014250109161668 · Twitter Post
• https://t.me/cvedetector/8238 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1847077410316992537 · Twitter Post
• https://t.me/cvenotify/128648 · Telegram Post