Skip to content
Submit incident
AII-1002-50959
ReportedReported by fewer than three independent publishers, with no official finding.

SSRF vulnerability in Gradio gr.DownloadButton

A server-side request forgery (SSRF) vulnerability was discovered in the gr.DownloadButton function in Gradio versions 4.42.0 and earlier. The save_url_to_cache function lacked URL restrictions, potentially allowing attackers to access local resources and sensitive information through the application.

31 October 2024 · Gradio · Security and cyberattacks
31 October 2024

Drafted by Raidu Incident Detection, an automated system.

AII-1002-509592 sources ↓
Quick facts
Organization
Gradio (subject)
Category
Security and cyberattacks
Source
gist.github.com
Date
31 October 2024
Drafted by
Raidu Incident Detection

What happened

The gr.DownloadButton function in Gradio versions 4.42.0 and earlier contains an SSRF vulnerability in the save_url_to_cache function. The function lacks URL restrictions, allowing access to local target resources without validation.

Reported impact

The vulnerability could allow unauthorized download of local resources and exposure of sensitive information. Attackers could exploit this by invoking the gr.DownloadButton with arbitrary URLs, potentially enabling SSRF attacks to access internal services.

Classification

Organization
Gradio (subject)
Category
Security and cyberattacks
Industry
IT infrastructure and hosting
Harm status
Potential harm
Intent
Unintentional
Timing
Unknown
Failure modes
Data leak
AI systems
Gradio

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

gist.github.com
https://gist.github.com/AfterSnows/45ffc23797f9127e00755376cc610e12
rumbling-slice-eb0.notion.site
https://rumbling-slice-eb0.notion.site/FULL-SSRF-in-gr-DownloadButton-in-gradio-app-gradio-870b21e0908b48cbafd914719ac1a4e6?pvs=4