CVE-2024-2206

An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6	Patch
https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e	Exploit Third Party Advisory
https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6	Patch
https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*

History

29 Jul 2025, 20:24

Type	Values Removed	Values Added
References	~~() https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 -~~	() https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 - Patch
References	~~() https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e -~~	() https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e - Exploit, Third Party Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~7.3~~	v2 : unknown v3 : 6.5
First Time		Gradio Project Gradio Project gradio
CPE		cpe:2.3:a:gradio_project:gradio::::::python::*

Information

Published : 2024-03-27 01:15

Updated : 2025-07-29 20:24

NVD link : CVE-2024-2206

Mitre link : CVE-2024-2206

CVE.ORG link : CVE-2024-2206

JSON object : View

Products Affected

gradio_project

gradio

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2024-2206", "cveTags": [], "metrics": {"cvssMetricV30": [{"type": "Secondary", "source": "security@huntr.dev", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 3.9}]}, "published": "2024-03-27T01:15:46.613", "references": [{"url": "https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6", "tags": ["Patch"], "source": "security@huntr.dev"}, {"url": "https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e", "tags": ["Exploit", "Third Party Advisory"], "source": "security@huntr.dev"}, {"url": "https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@huntr.dev", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function."}, {"lang": "es", "value": "La ruta /proxy permite a un usuario enviar URL arbitrarias, incluidos posibles endpoints internos."}], "lastModified": "2025-07-29T20:24:44.737", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*", "vulnerable": true, "matchCriteriaId": "34796D39-4F48-4463-B206-5153BD92C08A", "versionEndExcluding": "4.18.0", "versionStartIncluding": "3.47.1"}], "operator": "OR"}]}], "sourceIdentifier": "security@huntr.dev"}