CVE-2024-12779CWE-918

SSRF in infiniflow/ragflow

Medium · published March 20, 2025

CVSS v3.0
6.5
EPSS
1%
Percentile
50.9
In the wild
Unconfirmed
What it is

A Server-Side Request Forgery (SSRF) vulnerability exists in infiniflow/ragflow version 0.12.0. The vulnerability is present in the `POST /v1/llm/add_llm` and `POST /v1/conversation/tts` endpoints. Attackers can specify an arbitrary URL as the `api_base` when adding an `OPENAITTS` model, and subsequently access the `tts` REST API endpoint to read contents from the specified URL. This can lead to unauthorized access to internal web resources.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00660 · 50.9th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-03-20T10:11Z
EPSS history
Timeline
  • 20 MAR 10:11Z
    SSRF in infiniflow/ragflow
    cvelistv5