24 matches found
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
CVE-2025-45250
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery SSRF in the validateurl function of the appdoc/utils.py file...
CVE-2025-45250
MrDoc versions 0.95 and before are vulnerable to Server-Side Request Forgery (SSRF) due to a flaw in the validate_url function located in the app_doc/utils.py file. An attacker who is logged into the system can exploit this by sending a malicious request (e.g., via the /upload_doc_img/ endpoint) ...
Open Redirect
Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Open Redirect. The validateurl function can be forced to follow a redirect to an unintended site if the URL is passed to the file parameter and...