CVE-2024-2206

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-2206
An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function.

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 Patch
https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 Patch
https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e Exploit Third Party Advisory
https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*
History

29 Jul 2025, 20:24

Type Values Removed Values Added
CWE CWE-918
First Time Gradio Project
Gradio Project gradio
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*
References () https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e - () https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e - Exploit, Third Party Advisory
References () https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 - () https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 - Patch

16 Apr 2024, 12:15

Type Values Removed Values Added
Summary The /proxy route allows a user to proxy arbitrary urls including potential internal endpoints. An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls` set through the `X-Direct-Url` header in requests to the `/` and `/config` routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the `build_proxy_request` function.

27 Mar 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-27 01:15

Updated : 2025-07-29 20:24

NVD link : CVE-2024-2206

Mitre link : CVE-2024-2206

JSON object : View

Products Affected

gradio_project

  • gradio
CWE

No CWE.