CVE-2024-2206
Description
An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function.
How to fix
- gradio_project gradio4.18.0 or later
- gradio4.18.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gradio_project gradio | 3.47.1 ≤ v < 4.18.0 | 4.18.0 |
| gradioPyPI | v < 4.18.0 | 4.18.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.