PT-2025-12145 · Unknown+1 · Langgenius/Dify+1

Published 2025-03-20 · Updated 2025-07-14 · CVE-2024-12775

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions langgenius/dify version 0.10.1

Description The issue is a Server-Side Request Forgery (SSRF) vulnerability in the test functionality for the Create Custom Tool option via the REST API endpoint POST /console/api/workspaces/current/tool-provider/api/test/pre. Attackers can set the url in the servers dictionary in OpenAI's schema with arbitrary URL targets, allowing them to abuse the victim server's credentials to access unauthorized web resources.

Recommendations For version 0.10.1, as a temporary workaround, consider restricting access to the POST /console/api/workspaces/current/tool-provider/api/test/pre endpoint until a patch is available. Avoid using the url variable in the servers dictionary in OpenAI's schema for the Create Custom Tool option until the issue is resolved.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-12775

Affected Products

Openai

Langgenius/Dify

References · 5

• 🔥 https://huntr.com/bounties/e90e929a-9bc9-46ad-a5e5-1f6f124d0f12 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-12775 · Security Note
• https://osv.dev/vulnerability/CVE-2024-12775 · Vendor Advisory
• https://t.me/cvenotify/128905 · Telegram Post
• https://twitter.com/CVEnew/status/1902968908556202448 · Twitter Post