| शीर्षक | gpt_academic latest Server-Side Request Forgery |
|---|
| विवरण | The `gpt-academic` project contains multiple plugins that are vulnerable to Server-Side Request Forgery (SSRF). Flawed or non-existent validation of user-supplied URLs allows an attacker to force the server to make requests to arbitrary external websites or, more critically, to internal network services. This can lead to internal port scanning, accessing sensitive internal endpoints, and interacting with cloud metadata services. |
|---|
| स्रोत | ⚠️ https://github.com/d3do-23/cvelist/blob/main/gpt_academic/Plugins_ssrf.md |
|---|
| उपयोगकर्ता | d3do (UID 79609) |
|---|
| सबमिशन | 25/08/2025 04:23 AM (1 वर्ष पहले) |
|---|
| संयम | 10/09/2025 01:30 PM (16 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 300468 [binary-husky gpt_academic URL Validation अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|