CVE-2025-29720

Mô tả

Tham khảo

• dify.ai · Product
• langgenius/dify · Exploit

Lỗ hổng khác của dify

• CVE-2026-41950TRUNG BÌNH 6.5Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files…
• CVE-2026-42138TRUNG BÌNH 6.1Dify is an open-source LLM app development platform. Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated u…
• CVE-2025-63387CAO 7.5Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/syste…
• CVE-2025-56157NGHIÊM TRỌNG 9.8Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source co…
• CVE-2025-63388NGHIÊM TRỌNG 9.1A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/system-features endpoint. Th…