{"metadata": {"vulnerability": "cve-2024-47870", "count": 15, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-10-04T16:00:09.629Z", "date_only": false, "value": "2024-10-04T16:00:09.629Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-47870", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-10T22:04:21Z", "date_only": false, "value": "2024-10-10T22:04:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XH2X-3MRM-FWQM", "record": "GHSA-XH2X-3MRM-FWQM", "field": "published"}, {"timestamp": "2024-10-10T22:15:05.594Z", "date_only": false, "value": "2024-10-10T22:15:05.594Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-47870", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-10T22:15:05.594Z", "date_only": false, "value": "2024-10-10T22:15:05.594Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-47870", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-10T23:15:03Z", "date_only": false, "value": "2024-10-10T23:15:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XH2X-3MRM-FWQM", "record": "GHSA-XH2X-3MRM-FWQM", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-10T23:15:03Z", "date_only": false, "value": "2024-10-10T23:15:03+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2024-218", "record": "PYSEC-2024-218", "field": "published"}, {"timestamp": "2024-10-10T23:15:03.070Z", "date_only": false, "value": "2024-10-10T23:15:03.070", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-47870", "record": "FKIE_CVE-2024-47870", "field": "published"}, {"timestamp": "2024-10-11T01:58:03Z", "date_only": false, "value": "2024-10-11T01:58:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/7648", "record": "CVE-2024-47870", "field": "creation_timestamp", "uuid": "f0aa7ed9-5403-4ba1-a4bc-47cb3ce38940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-47870 - Gradio URL Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-47870 \nPublished : Oct. 10, 2024, 11:15 p.m. | 34\u00a0minutes ago \nDescription : Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **race condition** in the `update_root_in_config` function, allowing an attacker to modify the `root` URL used by the Gradio frontend to communicate with the backend. By exploiting this flaw, an attacker can redirect user traffic to a malicious server. This could lead to the interception of sensitive data such as authentication credentials or uploaded files. This impacts all users who connect to a Gradio server, especially those exposed to the internet, where malicious actors could exploit this race condition. Users are advised to upgrade to `gradio>=5` to address this issue. There are no known workarounds for this issue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/7648"}, {"timestamp": "2024-10-11T15:16:16.842Z", "date_only": false, "value": "2024-10-11T15:16:16.842847Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-47870", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-11T15:16:16.842Z", "date_only": false, "value": "2024-10-11T15:16:16.842847Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-47870", "record": "FKIE_CVE-2024-47870", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-11T15:17:49.588Z", "date_only": false, "value": "2024-10-11T15:17:49.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-47870", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-11T15:17:49.588Z", "date_only": false, "value": "2024-10-11T15:17:49.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-47870", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-19T22:22:23.803Z", "date_only": false, "value": "2025-01-19T22:22:23.803143+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2024-218", "record": "PYSEC-2024-218", "field": "modified"}, {"timestamp": "2025-01-21T17:18:30Z", "date_only": false, "value": "2025-01-21T17:18:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XH2X-3MRM-FWQM", "record": "GHSA-XH2X-3MRM-FWQM", "field": "modified"}, {"timestamp": "2026-06-17T07:57:53.347Z", "date_only": false, "value": "2026-06-17T07:57:53.347", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-47870", "record": "FKIE_CVE-2024-47870", "field": "lastModified"}]}