Lucene search
+L

2 matches found

SUSE CVE
SUSE CVE
added 2024/11/06 3:50 a.m.9 views

SUSE CVE-2024-48052

In gradio =4.42.0, the gr.DownloadButton function has a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resourc...

6.5CVSS6.5AI score0.0047EPSS
SaveExploits1References3
Rows per page
Query Builder