Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability · CVE-2023-6572 · GitHub Advisory Database · GitHub

Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Critical severity GitHub Reviewed Published Dec 14, 2023 to the GitHub Advisory Database • Updated Feb 28, 2024

Package

gradio (pip)

Affected versions

>= 0, < 4.14.0

Patched versions

4.14.0

Description

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository gradio-app/gradio prior to main.

References

Published by the National Vulnerability Database

Dec 14, 2023

Published to the GitHub Advisory Database Dec 14, 2023

Reviewed Feb 28, 2024

Last updated Feb 28, 2024

Severity

Critical

9.6

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N