Lucene search
K

7 matches found

VulnCheck KEV
VulnCheck KEV
added 2026/02/11 12:0 a.m.7 views

VulnCheck KEV: CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

5.3CVSS5.8AI score0.00135EPSS
In wildExploits2References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-14819

Malicious code in bioql PyPI...

4.8CVSS6.3AI score0.00068EPSS
Exploits1References2
OSV
OSV
added 2025/09/30 5:15 p.m.1 views

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

5.3CVSS7.5AI score
Exploits0References1
Cvelist
Cvelist
added 2025/09/30 12:0 a.m.5 views

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

0.00135EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/09/30 12:0 a.m.3 views

PT-2025-40009

Name of the Vulnerable Software and Affected Versions Dify version 1.6.0 Description The software contains a Server-Side Request Forgery SSRF issue. This occurs through the component controllers.console.remote files.RemoteFileUploadApi. The issue is distinct from CVE-2025-29720. Recommendations A...

5.3CVSS6.5AI score0.00135EPSS
Exploits2References8
Positive Technologies
Positive Technologies
added 2025/04/14 12:0 a.m.2 views

PT-2025-16259 · Dify · Dify

Name of the Vulnerable Software and Affected Versions: Dify version 1.0 Description: The issue is related to a Server-Side Request Forgery SSRF via the component controllers.console.remote files.RemoteFileUploadApi. This allows for potential unauthorized access to internal resources...

4.8CVSS6.2AI score0.00068EPSS
Exploits1References10
CNNVD
CNNVD
added 2025/04/14 12:0 a.m.2 views

dify 安全漏洞

dify is an open source LLM application development platform from LangGenius Open Source. A security vulnerability exists in dify v1.0, which stems from a server-side request forgery in the component controllers.console.remotefiles.RemoteFileUploadApi...

4.8CVSS6.5AI score0.00068EPSS
Exploits1References3
Rows per page
Query Builder