GitHub Advisoryadvisory · PyPI

GHSA-3x5j-9vwr-8rr5 Update share links to use FRP instead of SSH tunneling

MEDIUM Published 2023-02-23 Modified 2024-09-20 Official page ↗
Aliases
CVE-2023-25823
Ecosystem
PyPI
Packages
gradio
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
Weaknesses
CWE-798
Reviewed
2023-02-23

Affected packages

• PyPI gradio: < 3.13.1 → fixed in 3.13.1

Description

Impact This is a vulnerability which affects anyone using Gradio's share links (i.e. creating a Gradio app and then setting `share=True`) with Gradio versions older than 3.13.1. In these older versions of Gradio, a private SSH key is sent to any user that connects to the Gradio machine, which means that a user could access other users' shared Gradio demos. From there, other exploits are possible depending on the level of access/exposure the Gradio app provides. Patches The problem has been patched. Ideally, users should upgrade to `gradio==3.19.1` or later where the FRP solution has been properly tested. Credit Credit to Greg Sadetsky and Samuel Tremblay-Cossette for alerting the team

Related

Alias · CVE (1)

  • CVE-2023-25823 Gradio is an open-source Python library to build machine learning and data science demos and web applications. vulnerability

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References