Lucene search

Veracode Vulnerability DatabaseVERACODE:46798

HistoryMay 08, 2024 - 6:02 a.m.

Improper Access Control

2024-05-0806:02:52

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

validation

functions

unauthorized actions

sensitive data

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

gradio is vulnerable to Improper Access Control . The vulnerability is due to improper validation of the _is_server_fn attribute for functions. This allows attackers to execute functions that should be restricted, potentially leading to unauthorized actions or access to sensitive data.

CPENameOperatorVersion
gradiole4.12.0
gradiole4.12.0

CPE	Name	Operator	Version
	gradio	le	4.12.0
	gradio	le	4.12.0

References

github.com/advisories/GHSA-34rf-p3r3-58x2

github.com/gradio-app/gradio/

github.com/gradio-app/gradio/commit/24a583688046867ca8b8b02959c441818bdb34a2

github.com/gradio-app/gradio/pull/6884

www.gradio.app/changelog#4-13-0