Advisoriesby IbisGradioGHSA-7v2w-h4gh-w5cv
Gradio Vulnerable to Open Redirect
No fix yet
An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| gradio PyPI | <= 4.37.2 | No fix yet |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-601
- Also known as
- CVE-2024-8021, PYSEC-2026-1411
More Gradio advisories
All Gradio
Gradio DOS in multipart boundry while uploading the fileCVE-2024-8966no fix yetGradio Path Traversal vulnerabilityCVE-2024-12217no fix yetGradio Vulnerable to Denial of Service (DoS) via Crafted Zip BombCVE-2024-10569no fix yetGradio Vulnerable to Arbitrary File DeletionCVE-2024-10648no fix yetGradio Vulnerable to Denial of Service (DoS) via Crafted HTTP RequestCVE-2024-10624no fix yetGradio Blocked Path ACL Bypass VulnerabilityCVE-2025-23042fixed in 5.11.0