to pr" /> CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted to pr" /> CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted to pr" /> CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted to pr" /> to pr" /> to pr","inLanguage":"en-US","identifier":"CVE-2024-10624","datePublished":"2025-03-20T10:15:17.880","dateModified":"2026-06-17T06:56:04.430","about":{"@type":"Thing","name":"CVE-2024-10624","identifier":"CVE-2024-10624"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2024 10624","item":"https://gotrooted.org/cve/CVE-2024-10624"}]}]}

VULNERABILITY INTELLIGENCE

CVE-2024-10624

CVSS score7.5 HIGH
EPSS probability1.10%
CISA KEVNot currently listed
Published2025-03-20
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression `^(?:\s*now\s*(?:-\s*(\d+)\s*([dmhs]))?)?\s* CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted to pr" /> CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted to pr" /> CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted to pr" /> CVE-2024-10624 (CVSS 7.5 HIGH) - GotRooted to pr" /> to pr" /> to pr","inLanguage":"en-US","identifier":"CVE-2024-10624","datePublished":"2025-03-20T10:15:17.880","dateModified":"2026-06-17T06:56:04.430","about":{"@type":"Thing","name":"CVE-2024-10624","identifier":"CVE-2024-10624"},"isPartOf":{"@type":"WebSite","name":"GotRooted","url":"https://gotrooted.org/"},"publisher":{"@type":"Organization","name":"GotRooted","logo":{"@type":"ImageObject","url":"https://gotrooted.org/logo.png","width":640,"height":640}}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://gotrooted.org/"},{"@type":"ListItem","position":2,"name":"cve","item":"https://gotrooted.org/cve"},{"@type":"ListItem","position":3,"name":"CVE 2024 10624","item":"https://gotrooted.org/cve/CVE-2024-10624"}]}]} to process user input. In Python's default regex engine, this regular expression can take polynomial time to match certain crafted inputs. An attacker can exploit this by sending a crafted HTTP request, causing the gradio process to consume 100% CPU and potentially leading to a Denial of Service (DoS) condition on the server.

Weakness classification

  • security@huntr.dev: CWE-1333

Primary references