Executive brief
Gradio is a popular Python library for building web interfaces for machine learning models. The DownloadButton component contains an SSRF vulnerability that allows an attacker to make the server request arbitrary URLs, including local resources, potentially exposing sensitive files or enabling access to internal services. This can lead to unauthorized data exposure or system compromise.
Technical details
A server-side request forgery (SSRF, CWE-918) vulnerability exists in Gradio's gr.DownloadButton function, specifically in the save_url_to_cache method. The vulnerability arises from a lack of URL validation/restrictions when processing URLs provided by users, allowing attackers to craft malicious requests that force the server to access local resources (e.g., file:// URLs, localhost services, or internal IP addresses). An authenticated user or someone with access to the application can trigger the vulnerability by providing a crafted URL to the DownloadButton. No patches are mentioned in the advisory; however, versions up to and including 4.42.0 are affected.
Affected products
- Gradio Gradio <=4.42.0
Timeline
- 2024-11-04: disclosed: CVE-2024-48052 published to NVD
- 2024-11-05: advisory: GHSA-3gf9-wv65-gwh9 published