{
 "id": "AIR-2024-0134",
 "slug": "cve-2024-4325-ssrf-vulnerability-in-gradio",
 "title": "CVE-2024-4325: SSRF Vulnerability in Gradio",
 "summary": "A Server-Side Request Forgery vulnerability in Gradio arises from insufficient validation of user URLs in cache functions. This flaw enables attackers to transmit crafted requests accessing internal networks and metadata endpoints.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Gradio"
 ],
 "incident_date": "2024-06-06",
 "incident_date_precision": "day",
 "first_reported": "2024-06-06",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-973g-55hp-3frw",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2024-4325: Server-Side Request Forgery in gradio",
   "published_at": "2024-06-06"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4325",
   "publisher": "NVD",
   "title": "CVE-2024-4325: A Server-Side Request Forgery (SSRF) vulnerability exists in the gradio-app/gradio version 4.21.0, specifically within the…",
   "published_at": "2024-06-06"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2024-4325",
  "ssrf",
  "gradio"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}