Lucene search
Veracode Vulnerability DatabaseVERACODE:34739HistoryMar 18, 2022 - 12:15 p.m.
Command Injection
2022-03-1812:15:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
gradio vulnerability
code injection
flagging input
EPSS
0.002
Percentile
61.7%
gradio is vulnerable to code injection. The vulnerability exists in flag and open functions in flagging.py due to lack of sanitization of flagging inputs which allows a malicious attacker to send and execute arbitrary code.
Related
osv
osv
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
2022-03-18 23:11:43
PYSEC-2022-229
2022-03-17 21:15:00
CVE-2022-24770
2022-03-17 21:15:08
cve
cve
CVE-2022-24770
2022-03-17 21:15:08
prion
prion
Input validation
2022-03-17 21:15:00
nvd
nvd
CVE-2022-24770
2022-03-17 21:15:08
github
github
Improper Neutralization of Formula Elements in a CSV File in Gradio Flagging
2022-03-18 23:11:43
cnvd
cnvd
gradio arbitrary code injection vulnerability
2022-03-18 00:00:00
cvelist
cvelist