5 matches found
CVE-2025-29720
Dify v1.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi...
4.8CVSS7.5AI score0.00168EPSS
SaveExploits1References1
CVE-2025-29720
Dify v1.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi...
4.8CVSS0.00168EPSS
SaveExploits1References2
CVE-2025-29720
Dify v1.0 is vulnerable to a Server-Side Request Forgery (SSRF) via the controllers.console.remote_files.RemoteFileUploadApi component. This flaw potentially allows for unauthorized access to internal resources . While no patch version is currently identified, it is recommended to disable the Rem...
4.8CVSS7.5AI score0.00168EPSS
SaveExploits1References2Affected Software1
20