CVE Feed

    Dashboard / CVE / CVE-2025-0183

    CVE-2025-0183

    A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the `debug_log.html` file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access.

    Published:Mar 20, 2025
    Last Modified:Aug 1, 2025
    EPS:Mar 20, 2025
    EPSS Score:0.00033
    CVSS Score:5.4

    Affected Products

    Vendor
    Binary-husky
    Product
    Gpt Academic

    Exploits

    https://huntr.com/bounties/53bced90-64a9-4ca2-8f2f-282c4ce84d1f

    Related CVEs

    CVE-2026-0764 (CVSS 9.8) — GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability …
    CVE-2026-0763 (CVSS 9.8) — GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerabil…
    CVE-2026-0762 (CVSS 8.1) — GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabi…
    CVE-2025-10236 (CVSS 2.1) — A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function merge_tex_fil…
    CVE-2024-12387 (CVSS 6.5) — A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to c…
    CVE-2024-10986 (CVSS 8.8) — GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload functio…
    CVE-2024-10954 (CVSS 8.8) — In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to i…
    CVE-2024-10950 (CVSS 8.8) — In binary-husky/gpt_academic version <= 3.83, the plugin `CodeInterpreter` is vulnerable to code injection cau…
    CVE-2024-12390 (CVSS 8.8) — A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The applica…
    CVE-2024-10714 (CVSS 7.5) — A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High