Lucene search
Veracode Vulnerability DatabaseVERACODE:34739HistoryMar 18, 2022 - 12:15 p.m.
Command Injection
2022-03-1812:15:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.002 Low
EPSS
Percentile
59.3%
gradio is vulnerable to code injection. The vulnerability exists in flag and open functions in flagging.py due to lack of sanitization of flagging inputs which allows a malicious attacker to send and execute arbitrary code.
Related
cve
cve
CVE-2022-24770
2022-03-17 21:15:08
prion
prion
Input validation
2022-03-17 21:15:00
nvd
nvd
CVE-2022-24770
2022-03-17 21:15:08
osv
osv
PYSEC-2022-229
2022-03-17 21:15:00
CVE-2022-24770
2022-03-17 21:15:08
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
2022-03-18 23:11:43
github
github
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
2022-03-18 23:11:43
cvelist
cvelist
cnvd
cnvd
gradio arbitrary code injection vulnerability
2022-03-18 00:00:00