CVE-2024-10948

A vulnerability in the upload function of binary-husky/gptacademic allows any user to read arbitrary files on the system, including sensitive files such as "config.py". This issue affects the latest version of the product. An attacker can exploit this vulnerability by intercepting the websocket...