{"data":{"id":"1057628d-62ab-4247-9487-70a723f570ae","title":"CVE-2024-11031: In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the…","summary":"CVE-2024-11031 affects version 3.83 of binary-husky/gpt_academic. A Server-Side Request Forgery (SSRF) flaw in the Markdown_Translate.get_files_from_everything() API can be reached through the HotReload(Markdown翻译中) plugin function, which downloads arbitrary web hosts after only checking that the link starts with 'http'. An attacker can abuse the victim's Gradio Web server credentials to access unauthorized web resources.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-11031","publishedAt":"2025-03-20T14:15:22.820Z","cveId":"CVE-2024-11031","cweIds":["CWE-918","CWE-918"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["gpt_academic"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"gpt_academic server-side request forgery in Markdown_Translate API","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00667,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":["GHSA-4452-rwq3-2x44"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-28T18:09:47.316Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}