CVE-2024-47084

Gradio (Python library) has a CORS origin validation flaw: when a request carries a cookie, the server may not validate the origin, enabling a malicious site on the client to make unauthorized requests to a locally deployed Gradio server. Reported consequences include file uploads, token theft, a...