PT-2023-20328 · Gradio · Gradio

Greg Sadetsky + 1 · Published 2023-02-23 · Updated 2023-03-07 · CVE-2023-25823

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 3.13.1

Description Gradio is an open-source Python library to build machine learning and data science demos and web applications. When using Gradio's share links by setting share=True, a private SSH key is sent to any user that connects to the Gradio machine. This allows a user to access other users' shared Gradio demos, potentially leading to further exploits depending on the level of access or exposure the Gradio app provides.

Recommendations For Gradio versions prior to 3.13.1, update to version 3.19.1 or later, where the FRP solution has been properly tested. As a temporary workaround, consider disabling the share links feature by setting share=False until a patch is applied. Restrict access to shared Gradio demos to minimize the risk of exploitation. Avoid using the share=True parameter in Gradio apps until the issue is resolved.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2023-25823

GHSA-3X5J-9VWR-8RR5

PYSEC-2023-16

Affected Products

Gradio

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25823.json · Exploit
• https://github.com/gradio-app/gradio/security/advisories/GHSA-3x5j-9vwr-8rr5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25823 · Security Note
• https://osv.dev/vulnerability/CVE-2023-25823 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-3x5j-9vwr-8rr5 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2023-16 · Vendor Advisory
• https://github.com/gradio-app/gradio · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2023-16.yaml · Note
• https://t.me/cibsecurity/58831 · Telegram Post