Is CVE-2024-11033 actively exploited?

No active exploitation of CVE-2024-11033 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-11033 be exploited remotely?

Yes. CVE-2024-11033 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-11033?

CVE-2024-11033 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2024-11033

MEDIUM

CVE-2024-11033

CWE-400Published: March 20, 2025· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

A Denial of Service (DoS) vulnerability exists in the file upload feature of binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this vulnerability by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable for legitimate users.

NVD Source

Technical Analysis

CVE-2024-11033 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in availability disruption (denial of service), with a CVSS base score of 6.5.