Threats tagged 'ghsa-ghwm-jvhv-h9gp'

RAGFlow versions before 0.27.0 have a server-side request forgery (SSRF) vulnerability in the set_api_key endpoint. Authenticated attackers can supply an unvalidated base_url to force the server to make requests to arbitrary internal or external endpoints. Exploitation can reveal internal service details, open ports, and configuration fingerprints by leaking raw upstream exception text in responses.