CVE-2024-1183

Deeper analysis

An SSRF vulnerability tracked as CVE-2024-1183 affects the Gradio web interface library in the gradio-app/gradio repository. The flaw resides in handling of the file parameter on GET requests, where insufficient validation permits an attacker to cause the server to issue requests to arbitrary internal destinations and infer port status from response headers or error messages such as “File not allowed.”

An unauthenticated remote attacker can exploit the issue by crafting requests that target internal hosts and ports; successful responses containing a Location header reveal open services, while error responses indicate closed or filtered ports. This enables network reconnaissance inside environments where the Gradio application is deployed, potentially exposing backend infrastructure that would otherwise be inaccessible from the public internet.

Public references point to a fix committed in the Gradio repository (commit 2ad3d9e) that restricts the file parameter to prevent arbitrary internal requests; the associated huntr.dev report confirms the patch addresses the SSRF vector.

The vulnerability occurs in a library widely used for machine-learning demo interfaces. EPSS scores reached a peak of 0.6567 and remain at 0.5505, indicating sustained exploitation interest after disclosure.