CVE-2024-8021: Gradio Vulnerable to Open Redirect

March 20, 2025 (updated March 21, 2025)

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an attacker-controlled site.

References

github.com/advisories/GHSA-7v2w-h4gh-w5cv
github.com/gradio-app/gradio
huntr.com/bounties/adc23067-ec04-47ef-9265-afd452071888
nvd.nist.gov/vuln/detail/CVE-2024-8021

Code Behaviors & Features

Detect and mitigate CVE-2024-8021 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →