CVE-2024-0964

    Dashboard / Vulnerabilities / CVE-2024-0964

    CVE-2024-0964

    Published: 5 Feb 2024Last Modified: 28 Oct 2026

    Summary: LFI in Gradio

    Details: A local file include could be remotely triggered in Gradio due to a vulnerable user-supplied JSON value in an API request.

    References: https://huntr.com/bounties/25e25501-5918-429c-8541-88832dfd3741, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0964.json, https://nvd.nist.gov/vuln/detail/CVE-2024-0964, https://github.com/gradio-app/gradio/commit/d76bcaaaf0734aaf49a680f94ea9d4d22a602e70

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d76bcaaaf0734aaf49a680f94ea9d4d22a602e70

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-0964 | CVE-DB