Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:46812
HistoryMay 08, 2024 - 10:33 a.m.

Credential Exposure

2024-05-0810:33:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
gradio
pattern validation
starts_with_protocol
credential exposure
windows

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.0%

gradio is vulnerable to Credential Exposure. The vulnerability is caused by a lack of strict pattern validation in determining network or file paths in the starts_with_protocol() function, which can lead to the exposure of sensitive information through incorrect interpretation of network or file paths. Note that this vulnerability is only exploitable on Windows.

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for VERACODE:46812