PT-2023-28006 · Gradio · Gradio

CVE-2023-41626

·

Publicado

2023-09-15

·

Atualizado

2026-07-07

CVSS v3.1

4.8

Média

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Gradio version 3.27.0
Description The issue is related to an arbitrary file upload vulnerability. This vulnerability can be exploited via the "/upload" interface.
Recommendations For Gradio version 3.27.0, consider disabling the /upload interface until a patch is available to prevent exploitation of the arbitrary file upload vulnerability.

Exploit

Correção

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2023-41626
GHSA-V4Q9-QGQF-7JWP
PYSEC-2026-1422

Produtos afetados

Gradio