PT-2024-19175 · Gradio · Gradio

Published 2024-03-26 · Updated 2025-07-29 · CVE-2024-2206

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions gradio-app/gradio (affected versions not specified)

Description A vulnerability exists due to insufficient validation of user-supplied URLs in the "/proxy" route. Attackers can exploit this by manipulating the self.replica urls set through the X-Direct-Url header in requests to the "/" and "/config" routes, allowing the addition of arbitrary URLs for proxying. This enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the build proxy request function.

Recommendations As a temporary workaround, consider disabling the build proxy request function until a patch is available. Restrict access to the "/proxy" route to minimize the risk of exploitation. Avoid using the X-Direct-Url header in requests to the "/" and "/config" routes until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-2206

GHSA-R364-M2J9-MF4H

Affected Products

Gradio

References · 10

• 🔥 https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e · Exploit
• https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-2206 · Security Note
• https://osv.dev/vulnerability/GHSA-r364-m2j9-mf4h · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-2206 · Vendor Advisory
• https://github.com/gradio-app/gradio · Note
• https://t.me/cvenotify/74745 · Telegram Post
• https://t.me/cveNotify/130174 · Telegram Post
• https://t.me/cvenotify/76916 · Telegram Post
• https://twitter.com/CVEnew/status/1772791189508677702 · Twitter Post