Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-47131 State: PUBLISHED Published: 2024-11-11T14:53:13.470Z Last Updated: 2024-11-11T16:06:36.044Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: DIAScreen Problem Types: CWE-121 Description: If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-312-02 - https://www.deltaww.com/en-US/Cybersecurity_Advisory
CVE ID: CVE-2024-47133 State: PUBLISHED Published: 2024-12-05T09:40:48.474Z Last Updated: 2024-12-18T06:33:27.182Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: I-O DATA DEVICE, INC. Products: UD-LT1, UD-LT1/EX Problem Types: CWE-78 Description: UD-LT1 firmware Ver.2.1.9 and earlier and UD-LT1/EX firmware Ver.2.1.9 and earlier allow a remote authenticated attacker with an administrative account to execute arbitrary OS commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2024/11_ud-lt1/ - https://jvn.jp/en/jp/JVN46615026/
CVE ID: CVE-2024-47134 State: PUBLISHED Published: 2024-10-03T02:53:19.594Z Last Updated: 2024-10-03T15:34:44.845Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: JTEKT ELECTRONICS CORPORATION Products: Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Problem Types: CWE-787 Description: Out-of-bounds write vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execu
PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202410026928/ - https://www.electronics.jtekt.co.jp/jp/topics/2024100217388/ - https://jvn.jp/en/vu/JVNVU92808077/
CVE ID: CVE-2024-47135 State: PUBLISHED Published: 2024-10-03T02:53:46.102Z Last Updated: 2024-10-03T15:32:41.172Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: JTEKT ELECTRONICS CORPORATION Products: Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Problem Types: CWE-121 Description: Stack-based buffer overflow vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary co
Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202410026928/ - https://www.electronics.jtekt.co.jp/jp/topics/2024100217388/ - https://jvn.jp/en/vu/JVNVU92808077/
CVE ID: CVE-2024-47136 State: PUBLISHED Published: 2024-10-03T02:54:16.204Z Last Updated: 2024-10-03T15:29:25.895Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: JTEKT ELECTRONICS CORPORATION Products: Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Problem Types: CWE-125 Description: Out-of-bounds read vulnerability exists in Kostac PLC Programming Software (Former name: Koyo PLC Programming Software) Version 1.6.14.0 and earlier. Having a user open a specially crafted project file which was saved using Kostac PLC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execut
LC Programming Software Version 1.6.9.0 and earlier may cause a denial-of-service (DoS) condition, arbitrary code execution, and/or information disclosure because the issues exist in parsing of KPP project files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.electronics.jtekt.co.jp/en/topics/202410026928/ - https://www.electronics.jtekt.co.jp/jp/topics/2024100217388/ - https://jvn.jp/en/vu/JVNVU92808077/
CVE ID: CVE-2024-47137 State: PUBLISHED Published: 2024-11-05T08:01:24.921Z Last Updated: 2024-11-05T14:29:56.676Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v4.1.0 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through out-of-bounds write. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-11.md
CVE ID: CVE-2024-47138 State: PUBLISHED Published: 2024-11-22T22:19:52.736Z Last Updated: 2024-11-26T16:57:39.519Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mySCADA Products: myPRO Manager, myPRO Runtime Problem Types: CWE-306 Description: The administrative interface listens by default on all interfaces on a TCP port and does not require authentication when being accessed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07
CVE ID: CVE-2024-47139 State: PUBLISHED Published: 2024-10-16T14:12:46.833Z Last Updated: 2024-10-16T14:27:38.645Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IQ Problem Types: CWE-80 Description: A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that allows an attacker with the Administrator role to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000141080
CVE ID: CVE-2024-47140 State: PUBLISHED Published: 2025-01-15T14:59:29.896Z Last Updated: 2025-01-15T17:02:50.750Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: Observium Products: Observium Problem Types: CWE-79 Description: A cross-site scripting (xss) vulnerability exists in the add_alert_check page of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2090
CVE ID: CVE-2024-47141 State: PUBLISHED Published: 2025-01-11T12:25:12.399Z Last Updated: 2025-10-01T19:57:22.687Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: pinmux: Use sequential access to access desc->pinmux data When two client of the same gpio call pinctrl_select_state() for the same functionality, we are seeing NULL pointer issue while accessing desc->mux_owner. Let's say two processes A, B executing in pin_request() for the same pin and process A updates the desc->mux_usecount but not yet updated the desc->mux_owner while process B see the desc->mux_usecount which got updated by A path and further executes strcmp and
e desc->mux_owner while process B see the desc->mux_usecount which got updated by A path and further executes strcmp and while accessing desc->mux_owner it crashes with NULL pointer. Serialize the access to mux related setting with a mutex lock. cpu0 (process A) cpu1(process B) pinctrl_select_state() { pinctrl_select_state() { pin_request() { pin_request() { ... .... } else { desc->mux_usecount++; desc->mux_usecount && strcmp(desc->mux_owner, owner)) { if (desc->mux_usecount > 1) return 0; desc->mux_owner = owner; } } Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/2da32aed4a97ca1d70fb8b77926f72f30ce5fb4b - https://git.kernel.org/stable/c/c11e
ences: - https://git.kernel.org/stable/c/2da32aed4a97ca1d70fb8b77926f72f30ce5fb4b - https://git.kernel.org/stable/c/c11e2ec9a780f54982a187ee10ffd1b810715c85 - https://git.kernel.org/stable/c/5a3e85c3c397c781393ea5fb2f45b1f60f8a4e6e
CVE ID: CVE-2024-47142 State: PUBLISHED Published: 2024-11-22T00:14:03.529Z Last Updated: 2024-11-22T11:34:09.326Z Severity: MEDIUM (CVSS 5.5 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: AIPHONE CO., LTD. Products: IXG-2C7, IXG-2C7-L Problem Types: CWE-522 Description: AIPHONE IXG SYSTEM IXG-2C7 firmware Ver.2.03 and earlier and IXG-2C7-L firmware Ver.2.03 and earlier contain an issue with insufficiently protected credentials, which may allow a network-adjacent authenticated attacker to perform unintended operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.aiphone.net/important/20241016_2/ - https://www.aiphone.net/support/software-documents/ixg
nt: References: - https://www.aiphone.net/important/20241016_2/ - https://www.aiphone.net/support/software-documents/ixg/ - https://jvn.jp/en/jp/JVN41397971/
CVE ID: CVE-2024-47143 State: PUBLISHED Published: 2025-01-11T12:25:13.561Z Last Updated: 2025-11-03T20:39:31.851Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: dma-debug: fix a possible deadlock on radix_lock radix_lock() shouldn't be held while holding dma_hash_entry[idx].lock otherwise, there's a possible deadlock scenario when dma debug API is called holding rq_lock(): CPU0 CPU1 CPU2 dma_free_attrs() check_unmap() add_dma_entry() __schedule() //out (A) rq_lock() get_hash_bucket() (A) dma_entry_hash check_sync() (A) radix_lock() (W) dma_entry_hash dma_entry_free() (W) radix_lock() // CPU2's one (W) rq_lock() CPU1 situation
sync() (A) radix_lock() (W) dma_entry_hash dma_entry_free() (W) radix_lock() // CPU2's one (W) rq_lock() CPU1 situation can happen when it extending radix tree and it tries to wake up kswapd via wake_all_kswapd(). CPU2 situation can happen while perf_event_task_sched_out() (i.e. dma sync operation is called while deleting perf_event using etm and etr tmc which are Arm Coresight hwtracing driver backends). To remove this possible situation, call dma_entry_free() after put_hash_bucket() in check_unmap(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3ccce34a5c3f5c9541108a451657ade621524b32 - https://git.kernel.org/stab
er: References: - https://git.kernel.org/stable/c/3ccce34a5c3f5c9541108a451657ade621524b32 - https://git.kernel.org/stable/c/efe1b9bbf356357fdff0399af361133d6e3ba18e - https://git.kernel.org/stable/c/8c1b4fea8d62285f5e1a8194889b39661608bd8a - https://git.kernel.org/stable/c/c212d91070beca0d03fef7bf988baf4ff4b3eee4 - https://git.kernel.org/stable/c/f2b95248a16c5186d1c658fc0aeb2f3bd95e5259 - https://git.kernel.org/stable/c/7543c3e3b9b88212fcd0aaf5cab5588797bdc7de
CVE ID: CVE-2024-47145 State: PUBLISHED Published: 2024-09-26T08:01:48.199Z Last Updated: 2024-09-26T13:12:52.240Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Mattermost Products: Mattermost Problem Types: CWE-284 Description: Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels is disabled, which allows an attacker to view posts and files of archived channels via file links. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2024-47146 State: PUBLISHED Published: 2024-12-06T18:27:15.848Z Last Updated: 2024-12-06T20:21:34.147Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Ruijie Products: Reyee OS Problem Types: CWE-402 Description: Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could allow an attacker to obtain the devices serial number if physically adjacent and sniffing the RAW WIFI signal. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-24-338-01
CVE ID: CVE-2024-47148 State: PUBLISHED Published: 2024-12-26T12:01:43.893Z Last Updated: 2024-12-26T16:25:15.454Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47148/
CVE ID: CVE-2024-47149 State: PUBLISHED Published: 2024-12-26T12:07:12.425Z Last Updated: 2024-12-26T16:16:35.282Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47149/
CVE ID: CVE-2024-47150 State: PUBLISHED Published: 2024-12-26T12:16:26.133Z Last Updated: 2024-12-26T16:13:32.897Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47150/
CVE ID: CVE-2024-47151 State: PUBLISHED Published: 2024-12-26T11:09:01.825Z Last Updated: 2024-12-26T16:40:23.453Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47151/
CVE ID: CVE-2024-47153 State: PUBLISHED Published: 2024-12-26T11:31:46.763Z Last Updated: 2024-12-27T14:36:48.205Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47153/
CVE ID: CVE-2024-47154 State: PUBLISHED Published: 2024-12-26T11:39:52.536Z Last Updated: 2024-12-27T14:35:54.631Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47154/
CVE ID: CVE-2024-47155 State: PUBLISHED Published: 2024-12-26T11:47:45.436Z Last Updated: 2024-12-27T14:31:59.681Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47155/
CVE ID: CVE-2024-47156 State: PUBLISHED Published: 2024-12-26T11:02:40.837Z Last Updated: 2024-12-26T16:41:09.886Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Honor Products: MagicOS Description: Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47156/
CVE ID: CVE-2024-47157 State: PUBLISHED Published: 2024-12-26T11:52:40.429Z Last Updated: 2024-12-27T14:34:59.128Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Honor Products: Magic OS Description: Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.honor.com/global/security/cve-2024-47157/
CVE ID: CVE-2024-47158 State: PUBLISHED Published: 2024-10-25T07:59:12.647Z Last Updated: 2024-10-25T13:55:15.244Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: NEUMANN CO.LTD. Products: N-LINE Problem Types: CWE-94 Description: N-LINE 2.0.6 and prior versions contain a code injection vulnerability. If this vulnerability is exploited, arbitrary code may be executed on the instructor's browser, or the instructor may be directed to a malicious website. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://jvn.jp/en/jp/JVN57285747/
CVE ID: CVE-2024-47159 State: PUBLISHED Published: 2024-09-19T17:20:21.066Z Last Updated: 2024-09-19T18:01:19.913Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-863 Description: In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47160 State: PUBLISHED Published: 2024-09-19T17:20:21.734Z Last Updated: 2024-09-19T18:01:00.797Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-863 Description: In JetBrains YouTrack before 2024.3.44799 access to global app config data without appropriate permissions was possible Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47161 State: PUBLISHED Published: 2024-10-08T15:48:13.869Z Last Updated: 2024-10-08T16:14:45.963Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: JetBrains Products: TeamCity Problem Types: CWE-522 Description: In JetBrains TeamCity before 2024.07.3 password could be exposed via Sonar runner REST API Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47162 State: PUBLISHED Published: 2024-09-19T17:20:22.288Z Last Updated: 2024-09-19T17:58:06.239Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-522 Description: In JetBrains YouTrack before 2024.3.44799 token could be revealed on Imports page Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2024-47164 State: PUBLISHED Published: 2024-10-10T21:52:27.377Z Last Updated: 2024-10-11T15:24:48.863Z Vendors: gradio-app Products: gradio Problem Types: CWE-22 Description: Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to the **bypass of directory traversal checks** within the `is_in_or_equal` function. This function, intended to check if a file resides within a given directory, can be bypassed with certain payloads that manipulate file paths using `..` (parent directory) sequences. Attackers could potentially access restricted files if they are able to exploit this flaw, although the difficulty is high. This primarily impact
ly access restricted files if they are able to exploit this flaw, although the difficulty is high. This primarily impacts users relying on Gradio’s blocklist or directory access validation, particularly when handling file uploads. Users are advised to upgrade to `gradio>=5.0` to address this issue. As a workaround, users can manually sanitize and normalize file paths in their Gradio deployment before passing them to the `is_in_or_equal` function. Ensuring that all file paths are properly resolved and absolute can help mitigate the bypass vulnerabilities caused by the improper handling of `..` sequences or malformed paths. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
er handling of `..` sequences or malformed paths. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gradio-app/gradio/security/advisories/GHSA-77xq-6g77-h274
CVE ID: CVE-2024-47165 State: PUBLISHED Published: 2024-10-10T21:50:08.186Z Last Updated: 2024-10-11T15:26:04.717Z Vendors: gradio-app Products: gradio Problem Types: CWE-285 Description: Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **CORS origin validation accepting a null origin**. When a Gradio server is deployed locally, the `localhost_aliases` variable includes "null" as a valid origin. This allows attackers to make unauthorized requests from sandboxed iframes or other sources with a null origin, potentially leading to data theft, such as user authentication tokens or uploaded files. This impacts users running Gradio locally, espe
ing to data theft, such as user authentication tokens or uploaded files. This impacts users running Gradio locally, especially those using basic authentication. Users are advised to upgrade to `gradio>=5.0` to address this issue. As a workaround, users can manually modify the `localhost_aliases` list in their local Gradio deployment to exclude "null" as a valid origin. By removing this value, the Gradio server will no longer accept requests from sandboxed iframes or sources with a null origin, mitigating the potential for exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gradio-app/gradio/security/advisories/GHSA-89v2-pqfv-c5r9
CVE ID: CVE-2024-47166 State: PUBLISHED Published: 2024-10-10T21:48:54.416Z Last Updated: 2024-10-11T15:26:41.421Z Vendors: gradio-app Products: gradio Problem Types: CWE-22 Description: Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **one-level read path traversal** in the `/custom_component` endpoint. Attackers can exploit this flaw to access and leak source code from custom Gradio components by manipulating the file path in the request. Although the traversal is limited to a single directory level, it could expose proprietary or sensitive code that developers intended to keep private. This impacts users who have developed custom Gradi
oprietary or sensitive code that developers intended to keep private. This impacts users who have developed custom Gradio components and are hosting them on publicly accessible servers. Users are advised to upgrade to `gradio>=4.44` to address this issue. As a workaround, developers can sanitize the file paths and ensure that components are not stored in publicly accessible directories. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gradio-app/gradio/security/advisories/GHSA-37qc-qgx6-9xjv