We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-4941

Local File Inclusion in JSON component in gradio-app/gradio



Assigner@huntr_ai
Reserved2024-05-15
Published2024-06-06
Updated2024-08-01

Description

A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the `postprocess()` function within `gradio/components/json_component.py`, where a user-controlled string is parsed as JSON. If the parsed JSON object contains a `path` key, the specified file is moved to a temporary directory, making it possible to retrieve it later via the `/file=..` endpoint. This issue is due to the `processing_utils.move_files_to_cache()` function traversing any object passed to it, looking for a dictionary with a `path` key, and then copying the specified file to a temporary directory. The vulnerability can be exploited by an attacker to read files on the remote system, posing a significant security risk.



HIGH: 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Product status

Any version before 4.31.4
affected

References

https://huntr.com/bounties/39889ce1-298d-4568-aecd-7ae40c2ca58e

https://github.com/gradio-app/gradio/commit/ee1e2942e0a1ae84a08a05464e41c8108a03fa9c

cve.org CVE-2024-4941

nvd.nist.gov CVE-2024-4941

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.