How severe is CVE-2024-12390?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.8 out of 10.

What type of vulnerability is CVE-2024-12390?

This is classified as CWE-475, which is a common weakness in software security.

CVE-2024-12390 - HIGH Severity | CVSS 8.8

Vulnerability Description

A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The application supports the extraction of user-provided RAR files without proper validation. The Python rarfile module, which supports symlinks, can be exploited to perform arbitrary file writes. This can lead to remote code execution by writing to sensitive files such as SSH keys, crontab files, or the application's own code.

Related Vulnerabilities

CVE-2020-7925

HIGH

CVSS:7.5(High)

Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service....

CWE-4752020

CVE-2024-10569

HIGH

CVSS:7.5(High)

A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The component uses pd.read_csv to process input values, which can accept compressed ...

CWE-4752024

CVE-2024-20380

HIGH

CVSS:7.5(High)

A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an issue in...

CWE-4752024

CVE-2020-7925

HIGH

CVSS:7.5(High)

CWE-4752020

CVE-2024-10569

HIGH

CVSS:7.5(High)

CWE-4752024

CVE-2024-20380

HIGH

CVSS:7.5(High)

CWE-4752024