CVE-2024-0964

2024-02-0523:15:08

Google

osv.dev

local file include

remote trigger

user-supplied json

api request

software

0.001 Low

EPSS

Percentile

46.9%

JSON

A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.

CPENameOperatorVersion
gradioeq@gradio/[email protected]
gradioeq@gradio/[email protected]
gradioeq[email protected]
gradioeq@gradio/[email protected]
gradioeq3.34.0
gradioeq@gradio/[email protected]
gradioeq@gradio/[email protected]
gradioeq3.3b1
gradioeq3.4b5
gradioeq3.10.1

Name	Operator	Version
gradio	eq	@gradio/[email protected]
gradio	eq	@gradio/[email protected]
gradio	eq	[email protected]
gradio	eq	@gradio/[email protected]
gradio	eq	3.34.0
gradio	eq	@gradio/[email protected]
gradio	eq	@gradio/[email protected]
gradio	eq	3.3b1
gradio	eq	3.4b5
gradio	eq	3.10.1