gcdRadar
archive/Patch now/AIR-2024-0097
closedclosed 16 Apr 2024Patch now2 Disclosed vulnerabilityAI

Gradio Server-Side Request Forgery Vulnerability

gradio

A server-side request forgery vulnerability was discovered in Gradio allowing internal port scanning via the file parameter. A patch was released in version 4.10.0.

disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why

CVSS
6.5
EPSS
0.02 · top 22% · 2026-11-13
EPSS scores by FIRST
fix status
Fix status unknown
first report
16 Apr 2024
last update
16 Apr 2024
CVE ids
CVE-2024-1183other records

Timeline · 2

  1. 16 Apr 2024CVE-2024-1183: gradio Server-Side Request Forgery vulnerability
  2. 16 Apr 2024CVE-2024-1183: An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and…

Sources · 2

Advisories and databases

  1. 2024-04-16
    CVE-2024-1183: gradio Server-Side Request Forgery vulnerability
    GitHub Advisory Database · github.com/advisories/GHSA-qh6x-j82h-vpf9
  2. 2024-04-16
    CVE-2024-1183: An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and…
    NVD · nvd.nist.gov/vuln/detail/CVE-2024-1183

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Patch now
AI role
Attack on AI
categories
Infrastructure vulnerability
severity
2 · Disclosed vulnerability
fix status
Fix status unknown
targets
Framework / tooling
owasp llm top 10
LLM03:2025 Supply Chain
mitre atlas
no technique for these categories
tags
ssrf
dates
happened 16 Apr 2024 · first reported 16 Apr 2024
origin
GitHub Advisory Database
Vulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
record
confidence 0.95 · created 2026-10-18 07:00Z · updated 2026-10-18 10:04Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Gradio Server-Side Request Forgery Vulnerability

https://gcdradar.vercel.app/incidents/gradio-server-side-request-forgery-vulnerability · AIR-2024-0097 · closed 2024-04-16

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2024-04-16
- AI role: Attack on AI
- Products: gradio
- CVE ids: CVE-2024-1183
- CVSS: 6.5

## Summary

A server-side request forgery vulnerability was discovered in Gradio allowing internal port scanning via the file parameter. A patch was released in version 4.10.0.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2024-04-16: CVE-2024-1183: An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and… (https://nvd.nist.gov/vuln/detail/CVE-2024-1183)
- 2024-04-16: CVE-2024-1183: gradio Server-Side Request Forgery vulnerability (https://github.com/advisories/GHSA-qh6x-j82h-vpf9)

## Sources

- 2024-04-16 GitHub Advisory Database: CVE-2024-1183: gradio Server-Side Request Forgery vulnerability https://github.com/advisories/GHSA-qh6x-j82h-vpf9
- 2024-04-16 NVD: CVE-2024-1183: An SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and… https://nvd.nist.gov/vuln/detail/CVE-2024-1183

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed7.5
    Gradio CVE-2024-1561: gradio vulnerable to Path Traversal

    Patch now · Disclosed · since 16 Apr 2024 · CVE-2024-1561

    AI
  2. closed8.6
    Gradio CVE-2024-1540: Gradio Workflow Command Injection Vulnerability

    Patch now · Disclosed · since 27 Mar 2024 · CVE-2024-1540

    AI
  3. closed7.3
    Gradio CVE-2024-2206: Gradio Server-Side Request Forgery vulnerability

    Patch now · Disclosed · since 27 Mar 2024 · CVE-2024-2206

    AI
  4. closed4.3
    Gradio CVE-2024-1727: Gradio Local Route Access Vulnerability

    Patch now · Disclosed · since 21 May 2024 · updated 21 May 2024 · CVE-2024-1727

    AI
  5. closed5.4
    Gradio CVE-2024-4940: Open redirect vulnerability in gradio

    Patch now · Disclosed · since 22 Jun 2024 · CVE-2024-4940

    AI
  6. closed7.5
    Gradio CVE-2024-4941: Local file inclusion in Gradio JSON component

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4941

    AI