CVE-2024-10101

🗓️ 17 Oct 2024 18:12:21Reported by @huntr_aiType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 39 Views🌐 WEB

Stored XSS vulnerability in binary-husky/gpt_academic v3.83 at /file endpoin

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2024-10101	17 Oct 202421:40	–	circl
CNNVD	GPT Academic 安全漏洞	17 Oct 202400:00	–	cnnvd
CNVD	GPT Academic Cross-Site Scripting Vulnerability (CNVD-2025-22743)	23 Oct 202400:00	–	cnvd
Cvelist	CVE-2024-10101 Stored XSS in binary-husky/gpt_academic	17 Oct 202418:12	–	cvelist
EUVD	EUVD-2024-33574	3 Oct 202520:07	–	euvd
NVD	CVE-2024-10101	17 Oct 202419:15	–	nvd
Positive Technologies	PT-2024-16028 · Unknown · Binary-Husky/Gpt Academic	17 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-10101	23 May 202508:20	–	redhatcve
Vulnrichment	CVE-2024-10101 Stored XSS in binary-husky/gpt_academic	17 Oct 202418:12	–	vulnrichment

NVD

Node

binary-husky gpt_academicMatch3.83

[
  {
    "vendor": "binary-husky",
    "product": "binary-husky/gpt_academic",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "latest"
      }
    ]
  }
]

Source	Link
huntr	www.huntr.com/bounties/0436d96a-a2c4-4ca5-9f3c-fd68eb74d2cb

Parameter	Position	Path	Description	CWE
file	request body	/file	Stored XSS via HTML file uploaded to /file which is rendered by the server when accessed	CWE-79

11 Jul 2025 20:44Current

5.3Medium risk

Vulners AI Score5.3

CVSS 35.4

EPSS0.00318

SSVC

CWE-79