Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-47167— SSRF in the path parameter of /queue/join in Gradio

Quick assessment

Affected
gradio-app gradio
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Gradio是Hugging Face开源的一个开源 Python 库，是通过友好的 Web 界面演示机器学习模型的方法。 Gradio存在安全漏洞，该漏洞源于Gradio 的 函数允许攻击者强制 Gradio 服务器向用户控制的 URL 发送 HTTP 请求。

AI Predicted 9.1 Difficulty: Easy EPSS 0.48% · P39

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-47167

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
SSRF in the path parameter of /queue/join in Gradio
Source: CVE Program / CVE List V5
Vulnerability Description
Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This could enable attackers to target internal servers or services within a local network and possibly exfiltrate data or cause unwanted internal requests. Additionally, the content from these URLs is stored locally, making it easier for attackers to upload potentially malicious files to the server. This impacts users deploying Gradio servers that use components like the Video component which involve URL fetching. Users are advised to upgrade to `gradio>=5` to address this issue. As a workaround, users can disable or heavily restrict URL-based inputs in their Gradio applications to trusted domains only. Additionally, implementing stricter URL validation (such as allowinglist-based validation) and ensuring that local or internal network addresses cannot be requested via the `/queue/join` endpoint can help mitigate the risk of SSRF attacks.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
Gradio 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gradio是Hugging Face开源的一个开源 Python 库，是通过友好的 Web 界面演示机器学习模型的方法。 Gradio存在安全漏洞，该漏洞源于Gradio 的 `async_save_url_to_cache` 函数允许攻击者强制 Gradio 服务器向用户控制的 URL 发送 HTTP 请求。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
gradio-app gradio < 5.0 -

II. Public POCs for CVE-2024-47167

# POC Description Source Link Shenlong Link
1 None https://github.com/alexan011/CVE-2024-47167-Environment-Setup POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-47167

请登录查看更多情报信息。

Same Patch Batch · gradio-app · 2024-10-10 · 12 CVEs total

CVE-2024-47166 One-level read path traversal in `/custom_component` in Gradio
CVE-2024-47872 Cross-site Scripting on Gradio server via upload of HTML files, JS files, or SVG files
CVE-2024-47165 CORS origin validation accepts the null origin in Gradio
CVE-2024-47867 Lack of integrity check on the downloaded FRP client in Gradio
CVE-2024-47168 The `enable_monitoring` flag set to `False` does not disable monitoring in Gradio
CVE-2024-47084 CORS origin validation is not performed when the request has a cookie in Gradio
CVE-2024-47870 Race condition in update_root_in_config may redirect user traffic in Gradio
CVE-2024-47871 Insecure communication between the FRP client and server in Gradio
CVE-2024-47164 The `is_in_or_equal` function may be bypassed in Gradio
CVE-2024-47869 Non-constant-time comparison when comparing hashes in Gradio
CVE-2024-47868 Several components’ post-process steps may allow arbitrary file leaks in Gradio

IV. Related Vulnerabilities

Same product: gradio
Same vendor: gradio-app
Same weakness: CWE-918

V. Comments for CVE-2024-47167

No comments yet

Leave a comment