CVE-2024-4253 Command Injection in gradio-app/gradio

A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing for unauthorized modification of the base repository or...

CVE-2024-4253

CVE-2024-4253 is a command injection vulnerability in the gradio-app/gradio repository, present in the test-functional.yml workflow. The issue stems from improper neutralization of special elements in a command, enabling potential modification of the base repository or exfiltration of secrets (e....