CVE Feed

    Dashboard / CVE / CVE-2024-47167

    CVE-2024-47167

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This could enable attackers to target internal servers or services within a local network and possibly exfiltrate data or cause unwanted internal requests. Additionally, the content from these URLs is stored locally, making it easier for attackers to upload potentially malicious files to the server. This impacts users deploying Gradio servers that use components like the Video component which involve URL fetching. Users are advised to upgrade to `gradio>=5` to address this issue. As a workaround, users can disable or heavily restrict URL-based inputs in their Gradio applications to trusted domains only. Additionally, implementing stricter URL validation (such as allowinglist-based validation) and ensuring that local or internal network addresses cannot be requested via the `/queue/join` endpoint can help mitigate the risk of SSRF attacks.

    Published:Oct 10, 2024
    Last Modified:Oct 17, 2024
    EPS:Oct 10, 2024
    EPSS Score:0.00247
    CVSS Score:9.8

    Affected Products

    Vendor
    Gradio Project
    Product
    Gradio

    Exploits

    https://github.com/alexan011/CVE-2024-47167-Environment-Setup

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-664 Server Side Request Forgery

    Related CVEs

    CVE-2026-59806 (CVSS 4.9) — Gradio before 6.20.0 contains an open redirect and server-side request forgery vulnerability that allows attac…
    CVE-2026-49119 (CVSS 8.7) — Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() metho…
    CVE-2026-10783 (CVSS 1.1) — A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function save_audio_to_cache…
    CVE-2026-48545 (CVSS 7.6) — Gradio before version 6.15.0 contains a cookie injection vulnerability that allows remote attackers to perform…
    CVE-2026-28416 (CVSS 8.2) — Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, a Server-Side …
    CVE-2026-28415 (CVSS 4.3) — Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.6.0, the _redirect_…
    CVE-2026-28414 (CVSS 7.5) — Gradio is an open-source Python package designed for quick prototyping. Prior to version 6.7, Gradio apps runn…
    CVE-2026-27167 (CVSS 0) — Gradio is an open-source Python package designed for quick prototyping. Starting in version 4.16.0 and prior t…
    CVE-2025-48889 (CVSS 5.3) — Gradio is an open-source Python package that allows quick building of demos and web application for machine le…
    CVE-2024-8021 (CVSS 6.1) — An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High