Lucene search
K

4 matches found

OSV
OSV
added 2024/06/06 6:30 p.m.15 views

GHSA-973G-55HP-3FRW Server-Side Request Forgery in gradio

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio and was discovered in version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is us...

8.6CVSS8.3AI score0.65093EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2024/06/06 6:30 p.m.18 views

Server-Side Request Forgery in gradio

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio and was discovered in version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is us...

8.6CVSS8.3AI score0.65093EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/06 5:55 p.m.20 views

CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

8.6CVSS6.7AI score0.65093EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/06/06 5:55 p.m.17 views

CVE-2024-4325 Server-Side Request Forgery (SSRF) in gradio-app/gradio

A Server-Side Request Forgery SSRF vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the /queue/join endpoint and the saveurltocache function. The vulnerability arises when the path value, obtained from the user and expected to be a URL, is used to make an HTTP...

8.6CVSS0.65093EPSS
Exploits1References1
Rows per page
Query Builder