CVE-2024-8021: Gradio Vulnerable to Open Redirect

March 20, 2025 (updated March 21, 2025)

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.

References

github.com/advisories/GHSA-7v2w-h4gh-w5cv
github.com/gradio-app/gradio
huntr.com/bounties/adc23067-ec04-47ef-9265-afd452071888
nvd.nist.gov/vuln/detail/CVE-2024-8021

Code Behaviors & Features

Detect and mitigate CVE-2024-8021 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →