Vendor
marqo-ai
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
Marqo 2.26.0 Server-Side Request Forgery via Media URLs
Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit download_image_from_ur…