CVE-2024-47167-Environment-Setup

组件： 1. gradiocontainer: 在端口5678上托管内部HTTP服务器 2. targetinternalserver: 启动一个使用有漏洞的gradio版本4.40.0的Python应用...

CVE-2024-47167

Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...