← All advisories

Medium severity4.8NVD Advisory· Published Apr 14, 2025· Updated Jun 17, 2026

CVE-2025-29720

CVE-2025-29720

Description

Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Langgenius/Dify2 versions
cpe:2.3:a:langgenius:dify:1.0.0:-:*:*:*:node.js:*:*+ 1 more
- cpe:2.3:a:langgenius:dify:1.0.0:-:*:*:*:node.js:*:*
- (no CPE)
Dify.ai/difyllm-create
Range: = 1.0

Patches

Vulnerability mechanics

References

2

github.com/langgenius/dify/issues/15185nvdExploitIssue TrackingVendor Advisory
dify.ainvdProduct

News mentions

0

No linked articles in our index yet.