Denial of Service Vulnerability in Binary-Husky GPT Academic Software

CVE-2024-12391

What is CVE-2024-12391?

A vulnerability exists in Binary-Husky's GPT Academic software that allows for a Regular Expression Denial of Service (ReDoS) attack. The affected function enables the execution of user-supplied regular expressions, some of which may lead to significant delays in processing time. By crafting a specific regular expression and search string, an attacker can exploit this flaw, potentially causing the server to freeze and deny service for extended periods. This vulnerability highlights the need for careful handling of user inputs in regex processing to prevent performance degradation and service interruptions.

References