CVE-2024-10648

A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.

• CWE-29

• https://huntr.com/bounties/667d664d-8189-458c-8ed7-483fe8f33c76Exploit, Third Party Advisory

Published

Mar 20, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-1064A host header injection vulnerability in the HTTP handler co…7.5
• CVE-2024-10640The The FOX – Currency Switcher Professional for WooCommerce…7.3
• CVE-2024-10644Code injection in Ivanti Connect Secure before version 22.7R…7.2
• CVE-2024-10645The Blogger 301 Redirect plugin for WordPress is vulnerable …7.5
• CVE-2024-10646The Contact Form Plugin by Fluent Forms for Quiz, Survey, an…6.1
• CVE-2024-10647The WS Form LITE – Drag & Drop Contact Form Builder for Word…6.1
• CVE-2024-10649wandb/openui latest commit c945bb859979659add5f490a874140ad1…6.1
• CVE-2024-1065Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel D…5.9
• CVE-2024-10650An unauthenticated Denial of Service (DoS) vulnerability was…7.5
• CVE-2024-10651IDExpert from CHANGING Information Technology does not prope…4.9
• CVE-2024-10652IDExpert from CHANGING Information Technology does not prope…6.1
• CVE-2024-10653IDExpert from CHANGING Information Technology does not prope…7.2