CVE-2024-1728 PoC — gradio 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1728.yaml

Associated Vulnerability

Title:gradio 路径遍历漏洞 (CVE-2024-1728)
Description:Gradio是一个开源 Python 库，是通过友好的 Web 界面演示机器学习模型的方法。 gradio存在路径遍历漏洞，该漏洞源于对用户提供的输入验证不正确。

Description

gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper validation of user-supplied input in the UploadButton component.

File Snapshot


 id: CVE-2024-1728

info:
  name: Gradio > 4.19.1 UploadButton - Path Traversal
  author: isacaya
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.