CVE-2024-12391

MEDIUM Year: 2024
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-183
View all →

Vulnerability Description

A vulnerability in binary-husky/gpt_academic, as of commit 310122f, allows for a Regular Expression Denial of Service (ReDoS) attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take exponential time to execute, leading to a Denial of Service (DoS) condition. An attacker who controls both the regular expression and the search string can exploit this vulnerability to hang the server for an arbitrary amount of time.

Related Vulnerabilities

CVE-2022-34450

MEDIUM
CVSS:6.7(Medium)

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue and gain unrestricted control/code executi...

CWE-1832022

CVE-2024-38522

MEDIUM
CVSS:6.3(Medium)

Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The CSP policy applied on the `tips.hushline.app` website and bundled by default in this reposito...

CWE-1832024

CVE-2025-24349

HIGH
CVSS:7.1(High)

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network inte...

CWE-1832025

CVE-2023-4399

HIGH
CVSS:7.2(High)

Grafana is an open-source platform for monitoring and observability. In Grafana Enterprise, Request security is a deny list that allows admins to configure Grafana in a way so that the instance doesn’...

CWE-1832023

CVE-2024-1654

HIGH
CVSS:7.2(High)

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal ...

CWE-1832024

CVE-2020-25696

HIGH
CVSS:7.5(High)

A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \...

CWE-1832020