Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself.
References
Configurations
No configuration.
History
21 Nov 2024, 09:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Aaron911/PoC/blob/main/Gradio.md - | |
| References | () https://github.com/advisories/GHSA-9v2f-6vcg-3hgv - | |
| References | () https://github.com/gradio-app/gradio/issues/8853 - |
22 Jul 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/component_meta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself. | |
| References |
|
03 Jul 2024, 02:05
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-01 19:15
Updated : 2024-11-21 09:27
NVD link : CVE-2024-39236
Mitre link : CVE-2024-39236
CVE.ORG link : CVE-2024-39236
JSON object : View
Products Affected
No product.
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')