Security Advisory

CVE-2024-11030

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-20 10:11:15

Last updated 2025-03-20 13:24:02

Assigner @huntr_ai

State PUBLISHED

Description

GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability through its HotReload plugin function, which calls the crazy_utils.get_files_from_everything() API without proper sanitization. This allows attackers to exploit the vulnerability to abuse the victim GPT Academics Gradio Web servers credentials to access unauthorized web resources.

← Browse all CVEs View on cve.org ↗