CVE-2024-1561

An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...

CVE-2024-1561

creationtimestamp| type| source ---|---|--- 2024-05-11 13:48:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7277 2024-05-14 03:25:11+00:00| published-proof-of-concept| Telegram/v-Ke2icr51-PqqUlXFecYLVSiGZOdun89f-7jmTrgElcRI7m 2025-04-22 02:52:22+00:00| published-proof-of-concept...

academic-chatgpt (>=0.3.0 <=0.4.1), agentverse (>=0.1.5 <=0.1.8.1) +112 more potentially affected by CVE-2024-1561 via gradio (>=1.7.7 <=4.12.0)

gradio PYPI version =1.7.7, =0.3.0, =0.1.5, =0.0.2, =0.8.11, =0.7.0.dev134, =0.1.0rc1, =0.0.0, =0.6.14, =0.7.63 - axolotl =0.5.0 and more Source cves: CVE-2024-1561 Source advisory: OSV:GHSA-G9CJ-CFPP-4G2X...

CVE-2024-1561

An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...