Vulnerability Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. This flaw allows an attacker to send crafted requests that could lead to unauthorized access to the local network or the AWS metadata endpoint, thereby compromising the security of internal servers.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gradio Project | Gradio | < 4.41.0 |
Related Weaknesses (CWE)
References
- https://huntr.com/bounties/b34f084b-7d14-4f00-bc10-048a3a5aaf88ExploitThird Party Advisory
- https://huntr.com/bounties/b34f084b-7d14-4f00-bc10-048a3a5aaf88ExploitThird Party Advisory
FAQ
What is CVE-2024-4325?
CVE-2024-4325 is a vulnerability with a CVSS score of 8.6 (HIGH). A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerabilit...
How severe is CVE-2024-4325?
CVE-2024-4325 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-4325?
Check the references section above for vendor advisories and patch information. Affected products include: Gradio Project Gradio.