CVE-2024-48052
2 advisories.
PyPI/gradio CVE-2024-48052: medium 6.5, EPSS 0.47%
gradio Server Side Request Forgery vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.42.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-3gf9-wv65-gwh9
- https://nvd.nist.gov/vuln/detail/CVE-2024-48052
- https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12
- https://github.com/gradio-app/gradio
- https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4
CVE-2024-48052 · published · modified · JSON
PyPI/gradio CVE-2024-48052: medium 6.5, EPSS 0.47%
gradio Server Side Request Forgery vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.42.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1408
- https://nvd.nist.gov/vuln/detail/CVE-2024-48052
- https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12
- https://github.com/gradio-app/gradio
- https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4
- https://pypi.org/project/gradio
- https://github.com/advisories/GHSA-3gf9-wv65-gwh9
CVE-2024-48052 · published · modified · JSON