ByteOS Network

NVD Vulnerability Details :

CVE-2023-6572

Analyzed

More Info Official Page

Source-security@huntr.dev

Published At-14 Dec, 2023 | 14:15

Updated At-28 Feb, 2024 | 14:08

Command Injection in GitHub repository gradio-app/gradio prior to main.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Secondary	3.0	9.6	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Type: Primary

Version: 3.1

Base score: 8.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Type: Secondary

Version: 3.0

Base score: 9.6

Base severity: CRITICAL

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CPE Matches

gradio_project>>gradio>>Versions before 4.14.0(exclusive)

cpe:2.3:a:gradio_project:gradio:*:*:*:*:*:python:*:*

Weaknesses

CWE ID	Type	Source
CWE-77	Primary	security@huntr.dev
CWE-77	Secondary	nvd@nist.gov

CWE ID: CWE-77

Type: Primary

Source: security@huntr.dev

CWE ID: CWE-77

Type: Secondary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/gradio-app/gradio/commit/5b5af1899dd98d63e1f9b48a93601c2db1f56520	security@huntr.dev	Patch
https://huntr.com/bounties/21d2ff0c-d43a-4afd-bb4d-049ee8da5b5c	security@huntr.dev	Exploit Issue Tracking Patch Third Party Advisory

Hyperlink: https://github.com/gradio-app/gradio/commit/5b5af1899dd98d63e1f9b48a93601c2db1f56520

Source: security@huntr.dev

Resource:

Patch

Hyperlink: https://huntr.com/bounties/21d2ff0c-d43a-4afd-bb4d-049ee8da5b5c

Source: security@huntr.dev

Resource:

Exploit

Issue Tracking

Patch

Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History