CVE-2024-8966
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 20, 2025
Updated: Apr 1, 2025
CWE ID 400
Summary
CVE-2024-8966 is a vulnerability affecting the file upload process in gradio-app/gradio version @gradio/[email protected]. This issue enables a Denial of Service (DoS) attack through the addition of a large number of characters to the end of a multipart boundary. As a result, the system continuously processes each character and issues warnings, causing Gradio to become unresponsive and inaccessible for extended periods, ultimately leading to significant downtime and service disruptions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.