CVE-2024-12388

Description

A vulnerability in binary-husky/gpt_academic version 310122f allows for a Regular Expression Denial of Service (ReDoS) attack. The application uses a regular expression to parse user input, which can take polynomial time to match certain crafted inputs. This allows an attacker to send a small malicious payload to the server, causing it to become unresponsive and unable to handle any requests from other users.

Reserved 2024-12-09 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_ai

Problem types

CWE-115 Misinterpretation of Input

Product status

Any version
affected

References

huntr.com/bounties/b1c01c94-e477-41db-9d17-601aa25e351c

cve.org (CVE-2024-12388)

nvd.nist.gov (CVE-2024-12388)

Download JSON