CVE-2024-10648CWE-29

Path Traversal in gradio-app/gradio

High · published March 20, 2025

CVSS v3.0
8.2
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. This vulnerability allows an attacker to control the format of the audio file, leading to arbitrary file content deletion. By manipulating the output format, an attacker can reset any file to an empty file, causing a denial of service (DOS) on the server.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00731 · 53.8th percentile
Weakness
CWE-29 · Path Traversal: '\..\filename'
Published
2025-03-20T10:11Z
EPSS history
Timeline
  • 20 MAR 10:11Z
    Path Traversal in gradio-app/gradio
    cvelistv5