Advisory details:
pypa / gradio/PYSEC-2026-1413
| Advisory ID | pypa/gradio/PYSEC-2026-1413 |
| Aliases |
CVE-2024-4325
GHSA-973g-55hp-3frw PYSEC-2026-1413 |
| Summary | Server-Side Request Forgery in gradio A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio and was discovered in version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. This flaw allows an attacker to send crafted requests that could lead to unauthorized access to the local network or the AWS metadata endpoint, thereby compromising the security of internal servers. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 7.7 |
| Risk | 3.9 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| cvssv3 | 8.6 | https://github.com/pypa/advisory-database/blob/main/vulns/gradio/PYSEC-2026-1413.yaml |
| Reference id | Reference type | URL |
|---|---|---|
| https://github.com/gradio-app/gradio | ||
| https://github.com/gradio-app/gradio/pull/8301 | ||
| https://huntr.com/bounties/b34f084b-7d14-4f00-bc10-048a3a5aaf88 | ||
| https://pypi.org/project/gradio | ||
| CVE-2024-4325 | https://nvd.nist.gov/vuln/detail/CVE-2024-4325 | |
| GHSA-973g-55hp-3frw | https://github.com/advisories/GHSA-973g-55hp-3frw |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-06T19:32:08Z/
Decision: Track
Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2024/4xxx/CVE-2024-4325.json
Source Advisory: vulnrichment/CVE-2024-4325
[{'Exploitation': 'none'},
{'Automatable': 'no'},
{'Technical Impact': 'partial'},
{'Mission Prevalence': 'minimal'},
{'Public Well-being Impact': 'material'},
{'Mission & Well-being': 'medium'}]