Open Redirect Vulnerability in Binary-Husky GPT Academic Plugin

CVE-2024-10812

What is CVE-2024-10812?

An open redirect vulnerability was identified in the Binary-Husky gpt_academic plugin version 3.83, which allows an attacker to manipulate the 'file' parameter to redirect users to an arbitrary URL. This flaw arises from insufficient validation and sanitization of user input, making it susceptible to exploitation. Attackers could utilize this vulnerability to execute phishing schemes, deliver malware, or compromise user credentials, posing significant risks to user safety and data integrity.

References