Stored Cross-Site Scripting Vulnerability in Binary-Husky's Latex Proof-Reading Module
CVE-2025-0183

5.4MEDIUM

Key Information:

Vendor

Binary-husky

Status
Binary-husky/gpt Academic
Vendor
CVE Published:
20 March 2025

What is CVE-2025-0183?

A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of Binary-Husky's gpt_academic version 3.9.0. This issue allows attackers to inject malicious scripts into the debug_log.html file created by the module. When an administrator accesses this debug report, the injected scripts can execute within their context, potentially enabling unauthorized actions and access to sensitive data.

Affected Version(s)

binary-husky/gpt_academic <= unspecified

References

https://huntr.com/bounties/53bced90-64a9-4ca2-8f2f-282c4c...

CVSS V3.0

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.