CVE-2024-4325
HIGH EXPLOITED NUCLEIgradio < 4.41.0 - Server-Side Request Forgery via /queue/join Endpoint
Title source: llmExploitation Summary
CVE-2024-4325 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.
Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the `/queue/join` endpoint and the `save_url_to_cache` function. The vulnerability arises when the `path` value, obtained from the user and expected to be a URL, is used to make an HTTP request without sufficient validation checks. This flaw allows an attacker to send crafted requests that could lead to unauthorized access to the local network or the AWS metadata endpoint, thereby compromising the security of internal servers.
Nuclei Templates (1)
Gradio - Server-Side Request Forgery
HIGHVERIFIEDby iamnoooob,pdresearch
Shodan:
http.html:"__gradio_mode__" || http.title:"gradio"
FOFA:
body="__gradio_mode__" || title="gradio"
References (1)
Core 1
Core References
Exploit, Third Party Advisory
https://huntr.com/bounties/b34f084b-7d14-4f00-bc10-048a3a5aaf88
Scores
CVSS v3
8.6
EPSS
0.3737
EPSS Percentile
98.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
VulnCheck KEV
2024-09-25
CWE
CWE-918
Status
published
Products (2)
gradio_project/gradio
< 4.41.0
pypi/gradio
0PyPI
Published
Jun 06, 2024
Tracked Since
Feb 18, 2026