CVE-2025-0187 HIGH

CVE-2025-0187: Denial of Service (DoS) by Sending Large Filename at File Upload Endpoint in gradio-app/gradio

Vendor Gradio-App
Product gradio-app/gradio
Weakness CWE-400
Published March 20, 2025
Last update March 20, 2025
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A Denial of Service (DoS) vulnerability was discovered in the file upload feature of gradio-app/gradio version 0.39.1. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.

Key dates

02Disclosure timeline

March 20, 2025 CVE published
March 20, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-21231 IP Helper Denial of Service Vulnerability CVE-2020-3508 Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability CVE-2023-38200 Keylime: registrar is subject to a dos against ssl connections CVE-2022-3147 Server-side Denial of Service while processing a specifically crafted JPEG file CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler