PT-2025-12136 · Unknown+1 · Infiniflow/Ragflow+1

Published

2025-03-20

·

Updated

2025-04-04

·

CVE-2024-12450

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions infiniflow/ragflow version 0.12.0
Description The web crawl function in document app.py contains multiple vulnerabilities. The function does not filter URL parameters, allowing attackers to exploit Full Read SSRF by accessing internal network addresses and viewing their content through the generated PDF files. Additionally, the lack of restrictions on the file protocol enables Arbitrary File Read, allowing attackers to read server files. Furthermore, the use of an outdated Chromium headless version with --no-sandbox mode enabled makes the application susceptible to Remote Code Execution (RCE) via known Chromium v8 vulnerabilities.
Recommendations For infiniflow/ragflow version 0.12.0, update to version 0.14.0 to resolve the issues. As a temporary workaround, consider disabling the web crawl function in document app.py until a patch is available. Restrict access to internal network addresses and server files to minimize the risk of exploitation. Avoid using outdated Chromium headless versions and disable --no-sandbox mode to prevent RCE via known Chromium v8 vulnerabilities.

Exploit

Fix

RCE

SSRF

Command Injection

Weakness Enumeration

CWE-918CWE-77

Related Identifiers

CVE-2024-12450

Affected Products

Chromium
Infiniflow/Ragflow