CVE-2023-25823
published 2023-02-23CVE-2023-25823: Gradio is an open-source Python library to build machine learning and data science demos and web applications. Versions prior to 3.13.1 contain Use of…
PriorityP357critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.55%
42.0th percentile
Gradio is an open-source Python library to build machine learning and data science demos and web applications. Versions prior to 3.13.1 contain Use of Hard-coded Credentials. When using Gradio's share links (i.e. creating a Gradio app and then setting `share=True`), a private SSH key is sent to any user that connects to the Gradio machine, which means that a user could access other users' shared Gradio demos. From there, other exploits are possible depending on the level of access/exposure the Gradio app provides. This issue is patched in version 3.13.1, however, users are recommended to update to 3.19.1 or later where the FRP solution has been properly tested.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gradio-app | gradio | < 3.13.1 | 3.13.1 |
| gradio_project | gradio | < 3.13.1 | 3.13.1 |
| gradio_project | gradio | >= 0 < 3.13.1 | 3.13.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-25823: Gradio is an open-source Python library to build machine learning and data science demos and web applications
osv·2023-02-23
CVE-2023-25823 CVE-2023-25823: Gradio is an open-source Python library to build machine learning and data science demos and web applications
Gradio is an open-source Python library to build machine learning and data science demos and web applications. Versions prior to 3.13.1 contain Use of Hard-coded Credentials. When using Gradio's share links (i.e. creating a Gradio app and then setting `share=True`), a private SSH key is sent to any user that connects to the Gradio machine, which means that a user could access other users' shared Gradio demos. From there, other exploits are possible depending on the level of access/exposure the Gradio app provides. This issue is patched in version 3.13.1, however, users are recommended to update to 3.19.1 or later where the FRP solution has been properly tested.
GHSA
Update share links to use FRP instead of SSH tunneling
ghsa·2023-02-23
CVE-2023-25823 [MEDIUM] CWE-798 Update share links to use FRP instead of SSH tunneling
Update share links to use FRP instead of SSH tunneling
### Impact
This is a vulnerability which affects anyone using Gradio's share links (i.e. creating a Gradio app and then setting `share=True`) with Gradio versions older than 3.13.1. In these older versions of Gradio, a private SSH key is sent to any user that connects to the Gradio machine, which means that a user could access other users' shared Gradio demos. From there, other exploits are possible depending on the level of access/exposure the Gradio app provides.
### Patches
The problem has been patched. Ideally, users should upgrade to `gradio==3.19.1` or later where the FRP solution has been properly tested.
### Credit
Credit to Greg Sadetsky and Samuel Tremblay-Cossette for alerting the team
OSV
Update share links to use FRP instead of SSH tunneling
osv·2023-02-23
CVE-2023-25823 [MEDIUM] Update share links to use FRP instead of SSH tunneling
Update share links to use FRP instead of SSH tunneling
### Impact
This is a vulnerability which affects anyone using Gradio's share links (i.e. creating a Gradio app and then setting `share=True`) with Gradio versions older than 3.13.1. In these older versions of Gradio, a private SSH key is sent to any user that connects to the Gradio machine, which means that a user could access other users' shared Gradio demos. From there, other exploits are possible depending on the level of access/exposure the Gradio app provides.
### Patches
The problem has been patched. Ideally, users should upgrade to `gradio==3.19.1` or later where the FRP solution has been properly tested.
### Credit
Credit to Greg Sadetsky and Samuel Tremblay-Cossette for alerting the team
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-02-23
Published