CVE-2023-51449

Make the `/file` secure against file traversal attacks

Gradio is an open-source Python package that allows you to quickly build a demo or web application for your machine learning model, API, or any arbitary Python function. Versions of `gradio` prior to 4.11.0 contained a vulnerability in the `/file` route which made them susceptible to file traversal attacks in which an attacker could access arbitrary files on a machine running a Gradio app with a public URL (e.g. if the demo was created with `share=True`, or on Hugging Face Spaces) if they knew the path of files to look for. This issue has been patched in version 4.11.0.

Affected

gradio-app · gradio

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1 GITHUB

5.6 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS v3.1 GitHub

8.6 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS

28.34% chance of exploitation in the next 30 days, 98th percentile

Nuclei

high · CWE-22

Published

2023-12-22

Updated

2024-08-02

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51449.yaml

Vulhub environments (1)

• vulhub/vulhub/tree/master/gradio/CVE-2023-51449

Security advisories

• gradio-app/gradio/security/advisories/GHSA-6qm2-wpxq-7qh2
• advisories/GHSA-6qm2-wpxq-7qh2
• gradio-app/gradio/commit/1b9d4234d6c25ef250d882c7b90e1f4039ed2d76

References

• CVE Record
• NVD entry