2 lines
2.5 KiB
JSON
2 lines
2.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"binary-husky/gpt_academic","vendor":"binary-husky","versions":[{"lessThanOrEqual":"latest","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@huntr.dev"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:binary-husky:gpt_academic:3.90:*:*:*:*:*:*:*","matchCriteriaId":"4A5F4862-A553-44FB-90D8-6911A55379BE","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the `debug_log.html` file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access."},{"lang":"es","value":"Existe una vulnerabilidad de Cross-Site Scripting (XSS) almacenado en el módulo de corrección de pruebas de Latex de binary-husky/gpt_academic versión 3.9.0. Esta vulnerabilidad permite a un atacante inyectar scripts maliciosos en el archivo `debug_log.html` generado por el módulo. Cuando un administrador accede a este informe de depuración, los scripts inyectados pueden ejecutarse, lo que podría provocar acciones no autorizadas y acceso a los datos."}],"id":"CVE-2025-0183","lastModified":"2026-06-17T08:26:01.937","metrics":{"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"security@huntr.dev","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0183","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-20T17:48:44.741997Z","version":"2.0.3"}}]},"published":"2025-03-20T10:15:51.033","references":[{"source":"security@huntr.dev","tags":["Exploit","Third Party Advisory"],"url":"https://huntr.com/bounties/53bced90-64a9-4ca2-8f2f-282c4ce84d1f"}],"sourceIdentifier":"security@huntr.dev","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"security@huntr.dev","type":"Secondary"}]}
|