Eric-G

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw versions prior to 3.13.3 **Description** A security flaw in the `extractBin/RequestApproval/matchesAllowlist` function within the `internal/tools/exec approval.go` file allows for manipulation that results in incorrect authorization. **Recommendations** Update nextlevelbuilder GoClaw to version 3.13.3 or later. As a temporary workaround, restrict access to the `extractBin/RequestApproval/matchesAllowlist` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw versions prior to 3.15.0-beta.33 **Description** A flaw in the `web fetch` component allows for remote server-side request forgery (SSRF), a technique where an attacker induces the server to make requests to an unintended location. The issue resides within the `CheckSSRF/isPrivateIP()` function located in the `internal/tools/web shared.go` file. **Recommendations** Update to version 3.15.0-beta.33. As a temporary mitigation, restrict the use of the `CheckSSRF/isPrivateIP()` function.

**Name of the Vulnerable Software and Affected Versions** nextlevelbuilder GoClaw versions prior to 3.13.3 **Description** An issue in the Invoke Endpoint component allows for missing authorization. This occurs within the `ToolsInvokeHandler.ServeHTTP()` function located in the `internal/http/tools invoke.go` file. A remote attacker can exploit this weakness to bypass authorization requirements. **Recommendations** Update nextlevelbuilder GoClaw to version 3.13.3 or later. As a temporary mitigation, restrict access to the `ToolsInvokeHandler.ServeHTTP()` function.

**Name of the Vulnerable Software and Affected Versions** continuedev continue versions prior to 1.2.23 **Description** A path traversal issue exists in the JSON-RPC Server component within the `lsTool()` function of the `core/tools/implementations/lsTool.ts` file. This occurs when the `dirPath` argument is manipulated, allowing a local attacker to access files or directories outside the intended folder. **Recommendations** Update to a version later than 1.2.22. As a temporary workaround, restrict access to the `lsTool()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Langgenius Dify versions prior to 0.7.0 **Description** A server-side request forgery exists in the ApiToolManageService component. The issue occurs within the `get api tool provider remote schema()` function located in the 'api/services/tools/api tools manage service.py' file. A remote attacker can trigger this by manipulating the `url` argument. **Recommendations** Update to a version newer than 0.6.9. As a temporary workaround, restrict access to the `get api tool provider remote schema()` function until the update is applied.

A vulnerability has been found in langgenius dify up to 1.13.3. Impacted is the function openInNewTab of the file web/app/components/base/image-uploader/image-preview.tsx of the component ImagePreview. The manipulation of the argument filename leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse openai plugin json to tool bundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.