Skip to content
OpenAdvisories

Vendor

TaskingAI

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions

    TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers[0].url in a user-defined action. Attackers holding a …