CVE-2025-5320

A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function isvalidorigin of the component CORS Handler. The manipulation of the argument localhostaliases leads to erweiterte Rechte. It is possible to initiate the attack remotely. The...

PT-2025-23161 · Gradio · Gradio

Name of the Vulnerable Software and Affected Versions: gradio-app gradio versions up to 5.29.1 Description: A vulnerability has been found in the function is valid origin of the component CORS Handler. The manipulation of the argument localhost aliases leads to an origin validation error. It is...