2 matches found
gradio Server-Side Request Forgery vulnerability
An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the...
7.3CVSS7.2AI score0.00421EPSS
SaveExploits1References6Affected Software1
CVE-2024-2206: Server-Side Request Forgery (SSRF)
An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the...
7.3CVSS6AI score0.00421EPSS
SaveExploits1References2
20