gradio-app/gradio · Security
Gradio allows credential leakage on Windows
- GHSA ID
- GHSA-rvfh-h6c7-fc3c
- CVE ID
- CVE-2024-34510
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Gradio before 4.20 allows credential leakage on Windows.
CWEs
- CWE-116 · Improper Encoding or Escaping of Output