CVE-2024-4325
Last modified
CVE-2024-4325 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. EPSS estimates a 37.37% chance of exploitation in the next 30 days.
Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. This flaw allows an attacker to send crafted requests that could lead to unauthorized access to the local network or the AWS metadata endpoint, thereby compromising the security of internal servers.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gradio Project | Gradio | < 4.41.0 |
References
- https://huntr.com/bounties/b34f084b-7d14-4f00-bc10-048a3a5aaf88Exploit, Third Party Advisory
- https://huntr.com/bounties/b34f084b-7d14-4f00-bc10-048a3a5aaf88Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2024-4325?
How severe is CVE-2024-4325?
How do I fix CVE-2024-4325?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-43244Improper Neutralization of Input During Web Page Generation …7.1
- CVE-2024-43245Improper Privilege Management vulnerability in eyecix JobSea…9.8
- CVE-2024-43246Improper Neutralization of Input During Web Page Generation …7.1
- CVE-2024-43247Missing Authorization vulnerability in creativeon WHMpress a…8.8
- CVE-2024-43248Improper Limitation of a Pathname to a Restricted Directory …9.1
- CVE-2024-43249Unrestricted Upload of File with Dangerous Type vulnerabilit…8.8
- CVE-2024-43250Incorrect Authorization vulnerability in Bit Apps Bit Form P…6.5
- CVE-2024-43251Exposure of Sensitive Information to an Unauthorized Actor v…6.5
- CVE-2024-43252Deserialization of Untrusted Data vulnerability in Crew HRM …9
- CVE-2024-43253Missing Authorization vulnerability in ZAYTECH Smart Online …9.8
- CVE-2024-43254Missing Authorization vulnerability in ZAYTECH Smart Online …8.8
- CVE-2024-43255Improper Neutralization of Input During Web Page Generation …6.1
Are you affected by CVE-2024-4325?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST