CVE-2024-47167
📋 TL;DR
This Server-Side Request Forgery (SSRF) vulnerability in Gradio allows attackers to force the server to make HTTP requests to arbitrary URLs, potentially accessing internal network resources or uploading malicious files. It affects users deploying Gradio servers with URL-fetching components like Video. The vulnerability is critical with a CVSS score of 9.8.
💻 Affected Systems
- Gradio
📦 What is this software?
Gradio by Gradio Project
⚠️ Risk & Real-World Impact
Worst Case
Attackers could access sensitive internal services, exfiltrate data, upload malicious files to the server, and potentially pivot to other internal systems.
Likely Case
Unauthorized access to internal HTTP services, data exfiltration from internal endpoints, and potential file uploads to the Gradio server.
If Mitigated
Limited to accessing only allowed external domains with proper URL validation and restrictions.
🎯 Exploit Status
Exploitation requires access to the /queue/join endpoint with URL parameters.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: gradio>=5.0
Vendor Advisory: https://github.com/gradio-app/gradio/security/advisories/GHSA-576c-3j53-r9jj
Restart Required: Yes
Instructions:
1. Check current Gradio version: pip show gradio
2. Upgrade: pip install --upgrade gradio>=5.0
3. Restart all Gradio applications
🔧 Temporary Workarounds
Restrict URL-based inputs
allDisable or heavily restrict URL-based inputs to trusted domains only in Gradio applications
Implement URL validation
allAdd allowlist-based URL validation to prevent requests to internal/local addresses
🧯 If You Can't Patch
- Disable all URL-fetching components in Gradio applications
- Implement network segmentation to isolate Gradio servers from internal networks
🔍 How to Verify
Check if Vulnerable:
Check if Gradio version is below 5.0: pip show gradio | grep VersionCheck Version:
pip show gradio | grep VersionVerify Fix Applied:
Confirm version is 5.0 or higher: pip show gradio | grep Version📡 Detection & Monitoring
Log Indicators:
- Unusual HTTP requests from Gradio server to internal IPs
- Requests to /queue/join endpoint with URL parameters
Network Indicators:
- Outbound HTTP requests from Gradio server to unexpected destinations
- Requests to internal network ranges from Gradio server
SIEM Query:
source="gradio" AND (dest_ip IN [10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16] OR uri_path="/queue/join")