https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 22:59:52 +0000 https://cve.radiocsirt.org/vuln/cve-2024-12775 <p><strong>Affected:</strong> langgenius/dify</p> <p>langgenius/dify version 0.10.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the test functionality for the Create Custom Tool option via the REST API `POST /console/api/workspaces/current/tool-provider/api/test/pre`. Attackers can set the `url` in the `servers` dictionary in OpenAI&#39;s schema with arbitrary URL targets, allowing them to abuse the victim server&#39;s credentials to access unauthorized web resources.</p> <p><strong>Affected:</strong> langgenius/dify</p> <p>langgenius/dify version 0.10.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the test functionality for the Create Custom Tool option via the REST API `POST /console/api/workspaces/current/tool-provider/api/test/pre`. Attackers can set the `url` in the `servers` dictionary in OpenAI&#39;s schema with arbitrary URL targets, allowing them to abuse the victim server&#39;s credentials to access unauthorized web resources.</p> https://cve.radiocsirt.org/vuln/cve-2024-12775