VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Sep 30, 2025· Updated Jun 17, 2026

CVE-2025-56520

CVE-2025-56520

Description

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Langgenius/Difycpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:a:dify:dify:1.6.0:*:*:*:*:*:*:*
  • Dify.ai/difyllm-fuzzy
    Range: =1.6.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.