PT-2025-12131 · Unknown · Binary-Husky/Gpt Academic

Published 2025-03-20 · Updated 2025-03-21 · CVE-2024-12388

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic version 310122f

Description A Regular Expression Denial of Service (ReDoS) attack is possible due to the application's use of a regular expression to parse user input, which can take polynomial time to match certain crafted inputs. This allows an attacker to send a small malicious payload to the server, causing it to become unresponsive and unable to handle any requests from other users.

Recommendations For binary-husky/gpt academic version 310122f, consider restricting or validating user input to prevent crafted inputs from causing a denial of service. As a temporary workaround, consider implementing rate limiting or input sanitization to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Weakness Enumeration

CWE-1333

CWE-115

Related Identifiers

CVE-2024-12388

Affected Products

Binary-Husky/Gpt Academic

References · 4

• 🔥 https://huntr.com/bounties/b1c01c94-e477-41db-9d17-601aa25e351c · Exploit
• https://osv.dev/vulnerability/CVE-2024-12388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-12388 · Security Note
• https://twitter.com/CVEnew/status/1902968840319013161 · Twitter Post