Medium severity6.5NVD Advisory· Published Mar 27, 2024· Updated Jun 17, 2026
CVE-2024-2206
CVE-2024-2206
Description
An SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the /proxy route. Attackers can exploit this vulnerability by manipulating the self.replica_urls set through the X-Direct-Url header in requests to the / and /config routes, allowing the addition of arbitrary URLs for proxying. This flaw enables unauthorized proxying of requests and potential access to internal endpoints within the Hugging Face space. The issue arises from the application's inadequate checking of safe URLs in the build_proxy_request function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
gradioPyPI | < 4.18.0 | 4.18.0 |
Affected products
3- Range: unspecified
Patches
Vulnerability mechanics
References
4- github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6nvdPatchWEB
- huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98envdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-r364-m2j9-mf4hghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-2206ghsaADVISORY
News mentions
0No linked articles in our index yet.