CVE-2024-0964

CVSS V2 None CVSS V3 None
Description
A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.
Overview
  • CVE ID
  • CVE-2024-0964
  • Assigner
  • @huntr_ai
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-02-05T22:53:44.859Z
  • Last Modified Date
  • 2024-02-05T22:53:44.859Z
Weakness Enumerations
CWE URL
CWE-22 http://cwe.mitre.org/data/definitions/22.html
References
Reference URL Reference Tags
https://huntr.com/bounties/25e25501-5918-429c-8541-88832dfd3741
https://github.com/gradio-app/gradio/commit/d76bcaaaf0734aaf49a680f94ea9d4d22a602e70
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-0964
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0964
History
Created Old Value New Value Data Type Notes
2024-06-26 10:18:15 Added to TrackCVE