CVE-2024-12387
Improper Input Validation in binary-husky/gpt_academic
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Improper Input Validation in binary-husky/gpt_academic
A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to crash the server by uploading a specially crafted zip bomb. The server decompresses the uploaded file and attempts to load it into memory, which can lead to an out-of-memory crash. This issue arises due to improper input validation when handling compressed file uploads.
Reserved 2024-12-09 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_aiCWE-20 Improper Input Validation
huntr.com/bounties/02b4ab21-d29b-4cd7-ad80-f83081ce82a4
Support options
