Lucene search
K

CVE-2024-0243

🗓️ 24 Feb 2024 17:59:26Reported by @huntr_aiType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 85 Views🌐 WEB

Attacker can exploit crawler configuration to download malicious file from remote server

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2024-0243
14 Mar 202406:51
circl
CNNVD
LangChain Code Issues Vulnerabilities
26 Feb 202400:00
cnnvd
Cvelist
CVE-2024-0243 Server-side Request Forgery In Recursive URL Loader
24 Feb 202417:59
cvelist
EUVD
EUVD-2024-0652
3 Oct 202520:07
euvd
Github Security Blog
langchain Server-Side Request Forgery vulnerability
26 Feb 202418:30
github
Tenable Nessus
LangChain < 0.1.0 SSRF
8 Jan 202500:00
nessus
NVD
CVE-2024-0243
26 Feb 202416:27
nvd
OSV
GHSA-H9J7-5XVC-QHG5 langchain Server-Side Request Forgery vulnerability
26 Feb 202418:30
osv
OSV
PYSEC-2024-235
26 Feb 202416:27
osv
Prion
Design/Logic Flaw
26 Feb 202416:27
prion
Rows per page
NVD
Vulners
Vulnrichment
Node
[
  {
    "vendor": "langchain-ai",
    "product": "langchain-ai/langchain",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.1.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
hrefpathexample.completely.different/my_file.htmlExternal attacker-controlled URL could be fetched by the crawler due to improper enforcement of same-origin, enabling access to arbitrary files.CWE-918

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:53Current
3.8Low risk
Vulners AI Score3.8
CVSS 3.18.1
CVSS 33.7
EPSS0.00517
SSVC
85