CVE-2024-0964

An attacker sends a request to the Gradio API containing a maliciously crafted JSON value. The application improperly validates this value, enabling manipulation of the file path and traversal outside the allowed directory (path traversal). As a result, the server can be forced to read or disclose arbitrary local files accessible to the application process.

An unauthenticated remote attacker can gain unauthorized access to sensitive files on the server (high risk of confidentiality and integrity loss) and potentially cause partial disruption to service availability.

Gradio should be updated to a version containing commit d76bcaaaf0734aaf49a680f94ea9d4d22a602e70 or later. Details regarding specific patch versions are available in the vendor references and on the huntr.com platform.

Gradio Project Gradio — versions indicated in vendor references (fix commit: d76bcaaaf0734aaf49a680f94ea9d4d22a602e70)