CVE-2025-0187

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A Denial of Service (DoS) vulnerability was discovered in the file upload feature of gradio-app/gradio version 0.39.1. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
gradio-app	gradio-app/gradio	>= unspecified, <= latest

References

https://huntr.com/bounties/77f3ed54-9e1c-4d9f-948f-ee6f82e2fe24Exploit, Third Party Advisory

Timeline

Published: Mar 20, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-01886.5A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows a CVE-2025-01897.5In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size fo CVE-2025-01907.5In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying CVE-2025-01916.5A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability CVE-2025-01925.4A stored Cross-site Scripting (XSS) vulnerability exists in the latest version of wandb/openui. The vulnerability is present in the edit HTM CVE-2025-01935.2A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sa CVE-2025-01946.5An issue was discovered in GitLab CE/EE affecting all versions starting from 17.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and s CVE-2025-01956.5A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as critical. Affected by th CVE-2025-01966.5A vulnerability classified as critical has been found in code-projects Point of Sales and Inventory Management System 1.0. This affects an u CVE-2025-01976.5A vulnerability classified as critical was found in code-projects Point of Sales and Inventory Management System 1.0. This vulnerability aff CVE-2025-01986.5A vulnerability, which was classified as critical, has been found in code-projects Point of Sales and Inventory Management System 1.0. This CVE-2025-01996.5A vulnerability, which was classified as critical, was found in code-projects Point of Sales and Inventory Management System 1.0. Affected i