Description

An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the presence of a 'Location' header or a 'File not allowed' error in the response.

INFO

Published Date :

2024-04-16T00:00:14.458Z

Last Modified :

2024-08-01T18:33:24.939Z

Source :

@huntr_ai
AFFECTED PRODUCTS

The following products are affected by CVE-2024-1183 vulnerability.

Vendors Products
Gradio Project
  • Gradio
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-1183.

URL Resource
https://github.com/gradio-app/gradio/commit/2ad3d9e7ec6c8eeea59774265b44f11df7394bb4 cve-icon cve-icon cve-icon
https://huntr.com/bounties/103434f9-87d2-42ea-9907-194a3c25007c cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact