CVE-2024-4325
Server-Side Request Forgery (SSRF) in gradio-app/gradio
Vexday Risk Score
48Attention
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS 8.6EPSS 37.4%KEV nãoPoC —Nuclei simMetasploit —Patch —
Lifecycle
06 Jun 2024Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. This flaw allows an attacker to send crafted requests that could lead to unauthorized access to the local network or the AWS metadata endpoint, thereby compromising the security of internal servers.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected products
gradio-app · gradio-app/gradioWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →