PT-2022-16866 · Microsoft · Ms Excel

Haby0 · Published 2022-03-17 · Updated 2022-03-24 · CVE-2022-24770

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions gradio versions prior to 2.8.11

Description The gradio library has a flagging functionality that saves input/output data into a CSV file on the developer's computer. This can allow a user to save arbitrary text into the CSV file, such as commands. If a program like MS Excel opens such a file, then it automatically runs these commands, which could lead to arbitrary commands running on the user's computer.

Recommendations For versions prior to 2.8.11, avoid opening CSV files generated by gradio with Excel or similar spreadsheet programs. Update to version 2.8.11 or later, which escapes the saved CSV with single quotes, to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2022-24770

GHSA-F8XQ-Q7PX-WG8C

PYSEC-2022-229

Affected Products

Ms Excel

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24770.json · Exploit
• https://github.com/gradio-app/gradio/commit/80fea89117358ee105973453fdc402398ae20239 · Patch
• https://github.com/gradio-app/gradio/pull/817 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-24770 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24770 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2022-229 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f8xq-q7px-wg8c · Vendor Advisory
• https://github.com/gradio-app/gradio · Note
• https://github.com/gradio-app/gradio/security/advisories/GHSA-f8xq-q7px-wg8c · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2022-229.yaml · Note
• https://t.me/cibsecurity/39176 · Telegram Post