PT-2023-29956 · Unknown · Sd-Webui-Infinite-Image-Browsing

Name of the Vulnerable Software and Affected Versions: sd-webui-infinite-image-browsing extension versions before 977815a Description: The issue allows remote attackers to read any local file via the "/file?path=" endpoint in the URL, as demonstrated by reading /proc/self/environ to discover...

Arbitrary File Upload

Gradio is vulnerable to an Arbitrary File Upload vulnerability. The vulnerability is due to the /upload interface endpoint via /tmp directory. The attacker can exploit this by uploading arbitrary files, potentially leading to unauthorized access or execution of malicious code...

SUSE CVE-2023-41626

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

GHSA-V4Q9-QGQF-7JWP Gradio arbitrary file upload vulnerability

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

Gradio arbitrary file upload vulnerability

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

CVE-2023-41626

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

CVE-2023-41626

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

Design/Logic Flaw

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

CVE-2023-41626

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

CVE-2023-41626

Summary: CVE-2023-41626 affects Gradio v3.27.0, with a vulnerability that allows arbitrary file upload via the /upload interface. The connected sources confirm that this is an arbitrary file upload issue, but do not provide explicit exploit details, affected ranges beyond Gradio v3.27.0, or a pub...

CVE-2023-41626

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

Gradio Code Issue Vulnerability

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. A security vulnerability exists in Gradio version v3.27.0, which stems from an arbitrary file upload vulnerability in the /upload interface...

CVE-2023-41626

Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface...

PT-2023-28006

Name of the Vulnerable Software and Affected Versions Gradio version 3.27.0 Description The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the "/upload" interface. Recommendations For Gradio version 3.27.0, consider disabling the /upload...

Path Traversal

gradio is vulnerable to Path Traversal. The vulnerability exists because the library does not properly restrict the proxy URLs, which allows an attacker to access and read arbitrary files outside the expected directory through the malicious proxy URL...

GHSA-3QQG-PGQQ-3695 Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs

Impact There are two separate security vulnerabilities here: 1 a security vulnerability that allows users to read arbitrary files on the machines that are running shared Gradio apps 2 the ability of users to use machines that are sharing Gradio apps to proxy arbitrary URLs Patches Both problems...

SUSE CVE-2023-34239

Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path filtering Gradio does not properly restrict file access to users. Additionally Gradio does not properly restrict the what URLs are proxied. These issues have been addressed in...

CVE-2023-34239

Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path filtering Gradio does not properly restrict file access to users. Additionally Gradio does not properly restrict the what URLs are proxied. These issues have been addressed in...

PYSEC-2023-90

Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path filtering Gradio does not properly restrict file access to users. Additionally Gradio does not properly restrict the what URLs are proxied. These issues have been addressed in...

PYSEC-2023-90

Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path filtering Gradio does not properly restrict file access to users. Additionally Gradio does not properly restrict the what URLs are proxied. These issues have been addressed in...