by Kastro
Paper/Archive/CVE-2024-0964

CVE-2024-0964

gradio-app gradio-app/gradio — LFI in Gradio

EPSS 1.0%public exploitCVSS 9.4
critical.is priorityof 100
51
CVSS 9.4 (NVD)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 61.5.615 × 2012.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.

Affected

ProductAffectedFixed inSource
gradio-app/gradiounspecified – < xxCNA
gradio_app_gradio≤ *–CISA-ADP

Scores by source

NVD9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
@huntr_ai (CNA)7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refhuntr.com/bounties/25e25501-5918-429c-8541-88832dfd3741refgithub.com/gradio-app/gradio/commit/d76bcaaaf0734aaf49a680f94ea9d4d22a602e70