AI agent vulnerability · Gradio

CVE-2024-2206: gradio Server-Side Request Forgery vulnerability

highCVSS 3.0 7.3GHSA-r364-m2j9-mf4h

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replicaurls set through the X-Direct-Url header in requests to the / and /config routes, allowing the addition of arbitrary URLs for proxying.

Published Mar 27, 2024 · Updated Apr 16, 2024

Affected packages

gradio

Ecosystem: PyPI
Affected: < 4.18.0
Fixed in: 4.18.0
Check: pip show gradio

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replica_urls set through the X-Direct-Url header in requests to the / and /config routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the build_proxy_request function.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Gradio vulnerabilities

All Gradio entries