Unfiltered paths in gradio

CVE-2023-34239

What is CVE-2023-34239?

Gradio, an open-source Python library widely used for building machine learning and data science applications, has a vulnerability stemming from inadequate path filtering. This flaw permits unauthorized users to access restricted files. Additionally, it fails to restrict proxied URLs effectively, posing further security risks. Users are strongly advised to update to version 3.34.0 to safeguard against these issues, as there are currently no viable workarounds.

References