CVE-2025-3412

A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2trainingplatform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side reque...

CVE-2025-3412 mymagicpower AIAS InferController.java server-side request forgery

A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2trainingplatform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side reque...

CVE-2025-3412 mymagicpower AIAS InferController.java server-side request forgery

A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2trainingplatform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side reque...

CVE-2025-3412

CVE-2025-3412 affects mymagicpower AIAS 20250308; the vulnerability lies in an unknown function within 2_training_platform/train-platform/src/main/java/top/aias/training/controller/InferController.java. Manipulating the url argument triggers server-side request forgery (SSRF) and can be exploited...