Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2023-32786
HistoryOct 20, 2023 - 12:00 a.m.

CVE-2023-32786

2023-10-2000:00:00
mitre
github.com
1
langchain
prompt injection
ssrf
downstream tasks

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

40.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

In Langchain through 0.0.155, prompt injection allows an attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks.

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

40.6%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-32786