CVE-2023-34239 json
Unfiltered paths in gradio
published 2023-06-07 3 y ago modified 2026-09-10 1 mo ago also GHSA-3qqg-pgqq-3695 , PYSEC-2023-90 , EUVD-2023-0091
- cvss
- 7.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 51%
- public exploits
- 0
- none known
Summary
Gradio is an open-source Python library that is used to build machine learning and data science. Due to a lack of path filtering Gradio does not properly restrict file access to users. Additionally Gradio does not properly restrict the what URLs are proxied. These issues have been addressed in version 3.34.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Patch / fix
- pypi gradio 3.34.0
- gradio_project gradio 3.34.0
- github.com/gradio-app/gradio@3796761 commit
- github.com/gradio-app/gradio@cd64130 commit
- github.com/gradio-app/gradio#4370 pull request
- github.com/gradio-app/gradio#4406 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 22 mo ago
Exploit prediction
0.65% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| NVD | 3.1 | 9.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
| GitHub | 3.1 | 7.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | gradio | <3.34.0 |
3.34.0 |
Affected products
- gradio-app gradio
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
-
github.com
/gradio-app/gradio/pull/4370
web, patch
-
github.com
/gradio-app/gradio/pull/4406
web, patch
-
github.com
/gradio-app/gradio/commit/37967617bd97615fb6f3b44e7750c0e0be58479a
web
-
github.com
/gradio-app/gradio/commit/37967617bd97615fb6f3b44e7750c0e0be58479a#diff-324a7165f5d5a8823a28b76f5653fa45f32c81
web
-
github.com
/gradio-app/gradio/commit/cd64130d54e678525774bbb200ef9c7166fa1543
web
-
github.com
/gradio-app/gradio/security/advisories/GHSA-3qqg-pgqq-3695
web, vendor-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2023-34239
advisory
-
github.com
/gradio-app/gradio
package
-
github.com
/pypa/advisory-database/tree/main/vulns/gradio/PYSEC-2023-90.yaml
web
Sources
- CVE List CVE-2023-34239
- GitHub Advisory GHSA-3qqg-pgqq-3695
- NVD CVE-2023-34239
- OSV PYSEC-2023-90
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.