CVE-2025-48187

Mô tả

Tham khảo

• infiniflow/ragflow · Patch
• cnblogs.com/qiushuo/p/18881084 · Exploit

Lỗ hổng khác của ragflow

• CVE-2026-28797CAO 8.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions 0.24.0 and prior, a Server-Side Template Injection (SSTI)…
• CVE-2026-24770NGHIÊM TRỌNG 9.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser co…
• CVE-2025-69286NGHIÊM TRỌNG 9.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.22.0, the use of an insecure key generation al…
• CVE-2025-68700CAO 8.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In versions prior to 0.23.0, a low-privileged authenticated user (nor…
• CVE-2025-51462TRUNG BÌNH 6.1Stored Cross-site Scripting (XSS) vulnerability in api.apps.dialog_app.set_dialog in RAGFlow 0.17.2 allows remote attackers to execute arbit…