CVE-2024-1183 Scanner
CVE-2024-1183 Scanner - Server-Side-Request-Forgery (SSRF) vulnerability in Gradio
Used 3.4k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-1183
6.5
CVSSmedium
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the presence of a 'Location' header or a 'File not allowed' error in the response.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
gradio-app/gradiogradio
Updated Sep 18, 2026View on NVD →
S4E scanner
CVE history: gradio-app/gradio
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →