PT-2025-12134 · Binary Husky · Binary-Husky/Gpt Academic+1

Published 2025-03-20 · Updated 2025-03-20 · CVE-2024-12391

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic versions prior to commit 310122f

Description A Regular Expression Denial of Service (ReDoS) issue exists in the 解析项目源码（手动指定和筛选源码文件类型） function. This function allows the execution of user-provided regular expressions. Specific regular expressions can cause the Python RE engine to take exponential time to execute, resulting in a Denial of Service (DoS) condition. An attacker controlling both the regular expression and the search string can exploit this to hang the server for an arbitrary duration.

Recommendations Update to a version later than commit 310122f.

Exploit

Fix

DoS

Weakness Enumeration

CWE-1333

CWE-183

Related Identifiers

CVE-2024-12391

Affected Products

Binary-Husky/Gpt Academic

Gpt Academic

References · 3

• 🔥 https://huntr.com/bounties/70b3f4f0-6b1b-4563-a18c-fe46502e6ba0 · Exploit
• https://osv.dev/vulnerability/CVE-2024-12391 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-12391 · Security Note