~ / search / GHSA-7v2w-h4gh-w5cv

GHSA-7v2w-h4gh-w5cv

Gradio Vulnerable to Open Redirect

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-8021

Packages

EcosystemPackageAffectedFixed in
PyPI gradio <= 4.37.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.

References

External links from the advisory. They lead to third-party sites.