Skip to content
OpenAdvisories

Archive

20 March 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-0184 Public exploit

    Server-Side Request Forgery (SSRF) in langgenius/dify

    A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value i…

  • Medium 6.1
    CVE-2024-48591 Public exploit

    Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting (XSS). A specially crafted SVG file can be uploaded th…