Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository gradio-app/gradio prior to main.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6572US | high8.1 | Exploit | ||
Command Injection in GitHub repository gradio-app/gradio prior to main. | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/gradio-app/gradioPACKAGE
- https://github.com/gradio-app/gradio/commit/5b5af1899dd98d63e1f9b48a93601c2db1f56520WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2023-255.yamlWEB
- https://huntr.com/bounties/21d2ff0c-d43a-4afd-bb4d-049ee8da5b5cWEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-6572ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan