Security Advisory

CVE-2024-11030

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-03-20 10:11:15

Last updated 2025-03-20 13:24:02

Assigner @huntr_ai

CVSS score 7.7

State PUBLISHED

Description

GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability through its HotReload plugin function, which calls the crazy_utils.get_files_from_everything() API without proper sanitization. This allows attackers to exploit the vulnerability to abuse the victim GPT Academic's Gradio Web server's credentials to access unauthorized web resources.

← Browse all CVEs View on cve.org ↗