Gradio < 4.13.0 Local File Access

#%NASL_MIN_LEVEL 80900

##
# Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(213709);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/07/31");

  script_cve_id("CVE-2024-1561");

  script_name(english:"Gradio < 4.13.0 Local File Access");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Gradio installed on the remote host is prior to 4.13.0. It is, therefore, affected by a 
local file access vulnerability. An issue was discovered in gradio-app/gradio, where the `/component_server` 
endpoint improperly allows the invocation of any method on a `Component` class with attacker-controlled 
arguments. Specifically, by exploiting the `move_resource_to_block_cache()` method of the `Block` class, an 
attacker can copy any file on the filesystem to a temporary directory and subsequently retrieve it. This 
vulnerability enables unauthorized local file read access, posing a significant risk especially when the 
application is exposed to the internet via `launch(share=True)`, thereby allowing remote attackers to read 
files on the host machine. Furthermore, gradio apps hosted on `huggingface.co` are also affected, potentially 
leading to the exposure of sensitive information such as API keys and credentials stored in environment variables.

  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.");
  script_set_attribute(attribute:"see_also", value:"https://www.gradio.app/changelog#4-13-0");
  script_set_attribute(attribute:"see_also", value:"https://huntr.com/bounties/4acf584e-2fe8-490e-878d-2d9bf2698338");
  # https://github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?50d1c6e9");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Gradio version 4.13.0 or later.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:POC/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:P/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-1561");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_cwe_id(29);

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/04/16");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/04/16");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/01/10");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:gradio-app:gradio");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Artificial Intelligence");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("python_gradio_detect.nasl", "gradio_ui_detect.nasl");
  script_require_keys("installed_sw/Gradio");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::combined_get_app_info(app:'Gradio');
var constraints = [
    {'fixed_version':'4.13.0' },
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_HOLE);