Описание
Gradio arbitrary file upload vulnerability
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface.
Пакеты
Наименование
gradio
pip
Затронутые версииВерсия исправления
<= 3.27.0
Отсутствует
Связанные уязвимости
CVSS3: 4.8
nvd
больше 2 лет назад
Gradio v3.27.0 was discovered to contain an arbitrary file upload vulnerability via the /upload interface.