CVE-2024-1561 PoC — Gradio 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1561.yaml

Associated Vulnerability

Title:Gradio 安全漏洞 (CVE-2024-1561)
Description:Gradio是一个开源 Python 库，是通过友好的 Web 界面演示机器学习模型的方法。 Gradio 存在安全漏洞，该漏洞源于端点不正确地允许调用类上的任何方法，允许未经授权的本地文件读取访问，可能导致敏感信息泄露。

Description

Local file read by calling arbitrary methods of Components class between Gradio versions 4.3-4.12

File Snapshot


 id: CVE-2024-1561

info:
  name: Gradio 4.3-4.12 - Local File Read
  author: nvn1729,Diablo
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!