CVE-2024-10569
CVSS 3.0 Score 7.5 of 10 (high)
Details
Published Mar 20, 2025
CWE ID 475
Summary
CVE-2024-10569 is a vulnerability affecting the dataframe component of gradio-app/gradio (version 98cbcae). This issue allows for a zip bomb attack, where an attacker can upload a maliciously crafted zip file. The component uses pd.read\_csv to process input values, which can accept compressed files. When an attacker uploads a zip bomb, the server crashes, resulting in a denial of service. This vulnerability poses a significant risk and requires immediate attention and remediation to prevent potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.