CVE-2025-0187
Denial of Service (DoS) by Sending Large Filename at File Upload Endpoint in gradio-app/gradio
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Denial of Service (DoS) by Sending Large Filename at File Upload Endpoint in gradio-app/gradio
A Denial of Service (DoS) vulnerability was discovered in the file upload feature of gradio-app/gradio version 0.39.1. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.
Reserved 2025-01-03 | Published 2025-03-20 | Updated 2025-03-20 | Assigner @huntr_aiCWE-400 Uncontrolled Resource Consumption
huntr.com/bounties/77f3ed54-9e1c-4d9f-948f-ee6f82e2fe24
Support options
