Skip to content
OpenAdvisories

Vendor

marqo-ai

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    Marqo 2.26.0 Server-Side Request Forgery via Media URLs

    Marqo 2.26.0 contains a server-side request forgery vulnerability in the add_documents endpoint that allows unauthenticated attackers to trigger requests to arbitrary URLs by supplying malicious media field values. Attackers can exploit download_image_from_ur…