CRITICAL🇵🇱 Wersja polska

CVE-2024-0964

CVSS 9.4v3.1pub. 2024-02-05upd. 2024-11-21

A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

  • Gradio Project Gradio

    APP
    Gradio Project
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Path Traversal
CWE
References

Related vulnerabilities

CVE-2024-39236CRITICAL9.8PL ✓ten sam produkt

Code injection w Gradio v4.36.1 via component_meta.py

CVE-2024-4253CRITICAL9.1PL ✓ten sam produkt

Command Injection w workflow CI/CD repozytorium Gradio (GitHub Actions)

CVE-2026-49119HIGH8.7ten sam produkt

Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() metho...

CVE-2026-48545HIGH7.6ten sam produkt

Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform...

CVE-2026-28416HIGH8.2ten sam produkt

Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side ...