Authentication Bypass

2023-03-0108:15:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

gradio

authentication bypass

vulnerability

ssh keys

demos

EPSS

0.002

Percentile

58.6%

JSON

gradio is vulnerable to Authentication Bypass. The vulnerability exists due to the use of hard coded private ssh keys when sharing demos, which allows an attacker to gain access to other demos on the system.

References

github.com/advisories/GHSA-3x5j-9vwr-8rr5

github.com/gradio-app/gradio/commit/53005ab88a2c1ee8ec3679dd8df405e2a7a7bd87

github.com/gradio-app/gradio/pull/2509

github.com/gradio-app/gradio/security/advisories/GHSA-3x5j-9vwr-8rr5

EPSS

0.002

Percentile

58.6%

JSON

Related for VERACODE:39472