Improper Access Control

2024-05-0806:02:52

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

validation

functions

unauthorized actions

sensitive data

AI Score

7.2

Confidence

High

EPSS

Percentile

9.0%

JSON

gradio is vulnerable to Improper Access Control . The vulnerability is due to improper validation of the _is_server_fn attribute for functions. This allows attackers to execute functions that should be restricted, potentially leading to unauthorized actions or access to sensitive data.