Exploit for Path Traversal in Gradio_Project Gradio

CVE-2024-1561 Nuclei Template This Nuclei template is designe...

Exploit for Path Traversal in Gradio_Project Gradio

CVE-2024-1561 PoC Script This is a Proof of Concept PoC scr...

Credential Exposure

gradio is vulnerable to Credential Exposure. The vulnerability is caused by a lack of strict pattern validation in determining network or file paths in the startswithprotocol function, which can lead to the exposure of sensitive information through incorrect interpretation of network or file path...

SUSE CVE-2024-34510

Gradio before 4.20 allows credential leakage on Windows...

GHSA-RVFH-H6C7-FC3C Gradio allows credential leakage on Windows

Gradio before 4.20 allows credential leakage on Windows...

Gradio's Component Server does not properly consider` _is_server_fn` for functions

Component Server in Gradio before 4.13 does not properly consider isserverfn for functions...

GHSA-34RF-P3R3-58X2 Gradio's Component Server does not properly consider` _is_server_fn` for functions

Component Server in Gradio before 4.13 does not properly consider isserverfn for functions...

Gradio allows credential leakage on Windows

Gradio before 4.20 allows credential leakage on Windows...

CVE-2024-34511

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1561. Reason: This candidate is a duplicate of CVE-2024-1561. Notes: All CVE users should reference CVE-2024-1561 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2024-34510

Gradio before 4.20 allows credential leakage on Windows...

PYSEC-2024-255

Gradio before 4.20 allows credential leakage on Windows...

PYSEC-2024-255

Gradio before 4.20 allows credential leakage on Windows...

CVE-2024-34510

Gradio before 4.20 allows credential leakage on Windows...

编号撤回

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. This CVE number has been withdrawn...

PT-2024-25942

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 4.13 Description The issue arises from the Component Server in Gradio not properly considering is server fn for functions. This can lead to security risks if function calls do not take is server fn into account...

Gradio 安全漏洞

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. A security vulnerability exists in Gradio versions prior to 4.20, which stems from allowing credential disclosure on Windows...

CVE-2024-34510

Gradio before 4.20 allows credential leakage on Windows...

CVE-2024-34510

Gradio before 4.20 allows credential leakage on Windows...

PT-2024-4392 · Gradio · Gradio

Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 4.20 Description: The issue is related to insufficient protection of sensitive data in Gradio, a Python package for creating applications for machine learning models. This can allow a remote attacker to gain access to...

CVE-2024-34510

Summary: CVE-2024-34510 affects Gradio prior to 4.20 and allows credential leakage on Windows. The CVSS v3.1 metrics indicate a HIGH severity (base score 7.5) with network attack vector, low attack complexity, no privileges required, and no user interaction. The impact is limited to confidentiali...