CVE-2024-2206 Information

Description

The /proxy route allows a user to proxy arbitrary urls including potential internal endpoints.

Reference

https://huntr.com/bounties/2286c1ed-b889-45d6-adda-7014ea06d98e https://github.com/gradio-app/gradio/commit/49d9c48537aa706bf72628e3640389470138bdc6 The /proxy route allows a user to proxy arbitrary urls including potential internal endpoints.