1 result · Clear filters · Feed
-
Medium 6.5
ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check
ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated provider base_url. Attackers can set base_url via the provider config endpoint and…