n SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function.
| Link | Resource |
|---|---|
| https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 | Patch |
| https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e | Exploit Third Party Advisory |
| https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 | Patch |
| https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e | Exploit Third Party Advisory |
29 Jul 2025, 20:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 - Patch | |
| References | () https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e - Exploit, Third Party Advisory | |
| First Time |
Gradio Project gradio
Gradio Project |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CPE | cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:* |
21 Nov 2024, 09:09
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 - | |
| References | () https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e - |
Published : 2024-03-27 01:15
Updated : 2025-07-29 20:24
NVD link : CVE-2024-2206
Mitre link : CVE-2024-2206
CVE.ORG link : CVE-2024-2206
JSON object : View
Server-Side Request Forgery (SSRF)