CVE-2025-29720

MEDIUM Year: 2025
CVSS v3 Score
4.8
Medium
Weakness Type
CWE-918
View all →

Vulnerability Description

Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi.

Related Vulnerabilities

CVE-2021-39051

MEDIUM
CVSS:4.8(Medium)

IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could e...

CWE-9182021

CVE-2022-0132

MEDIUM
CVSS:4.8(Medium)

peertube is vulnerable to Server-Side Request Forgery (SSRF)

CWE-9182022

CVE-2024-3095

MEDIUM
CVSS:4.8(Medium)

A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of langchain-ai/langchain version 0.1.5. The vulnerability arises because the Web Research Retriever d...

CWE-9182024

CVE-2024-35451

MEDIUM
CVSS:4.8(Medium)

LinkStack 2.7.9 through 4.7.7 allows resources\views\components\favicon.blade.php link SSRF.

CWE-9182024

CVE-2017-16678

MEDIUM
CVSS:4.7(Medium)

Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7.31, 7.40 and 7.50, that allows an attacke...

CWE-9182017

CVE-2021-41084

MEDIUM
CVSS:4.7(Medium)

http4s is an open source scala interface for HTTP. In affected versions http4s is vulnerable to response-splitting or request-splitting attacks when untrusted user input is used to create any of the f...

CWE-9182021