.. / CVE-2024-1728

• LFI
• Nuclei
• Web

Exploit for Gradio > 4.19.1 UploadButton - Path Traversal (CVE-2024-1728)

Description:

gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper validation of user-supplied input in the UploadButton component.

Nuclei Template

View the template here CVE-2024-1728.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-1728.yaml

References: