CVE-2024-2206

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the "/proxy" route. Attackers can exploit this vulnerability by manipulating the "self.replicaurls" set through the "X-Direct-Url" header in requests to the "/" and "/config" routes,...

CVE-2024-2206: Server-Side Request Forgery (SSRF)

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the...