.. / CVE-2023-51449

• LFI
• Nuclei
• Web

Exploit for Gradio Hugging Face - Local File Inclusion (CVE-2023-51449)

Description:

Gradio LFI when auth is not enabled, affects versions 4.0 - 4.10, also works against Gradio < 3.33

Nuclei Template

View the template here CVE-2023-51449.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-51449.yaml

References: