CVE-2024-47167 | Gradio up to 4.x Video Component /queue/join async_save_url_to_cache server-side request forgery (GHSA-576c-3j53-r9jj)

A vulnerability classified as critical was found in Gradio up to 4.x. Affected by this vulnerability is the function async_save_url_to_cache of the file /queue/join of the component Video Component. The manipulation leads to server-side request forgery.

This vulnerability is known as CVE-2024-47167. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.