CVE-2024-10812

An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by user-controlled input in the 'file' parameter without proper validation or sanitization. This can be exploited by attackers to conduct phishing attacks, distribute malware, and steal user credentials.

• CWE-601

• https://huntr.com/bounties/51408ebd-e0be-489d-8088-f210087dbd6aExploit, Third Party Advisory

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10807A vulnerability was found in PHPGurukul Hospital Management …4.8
• CVE-2024-10808A vulnerability has been found in code-projects E-Health Car…7.5
• CVE-2024-10809A vulnerability was found in code-projects E-Health Care Sys…7.5
• CVE-2024-1081The 3D FlipBook – PDF Flipbook WordPress plugin for WordPres…5.4
• CVE-2024-10810A vulnerability was found in code-projects E-Health Care Sys…7.5
• CVE-2024-10811Absolute path traversal in Ivanti EPM before the 2024 Januar…7.5
• CVE-2024-10813The Product Table for WooCommerce by CodeAstrology (wooprodu…7.5
• CVE-2024-10814The Code Embed plugin for WordPress is vulnerable to Server-…6.4
• CVE-2024-10815The PostLists WordPress plugin through 2.0.2 does not escape…4.2
• CVE-2024-10816The LUNA RADIO PLAYER plugin for WordPress is vulnerable to …7.5
• CVE-2024-10818The JSFiddle Shortcode WordPress plugin before 1.1.3 does no…5.4
• CVE-2024-10819A Cross-Site Request Forgery (CSRF) vulnerability in version…8.8