Threats tagged 'ghsa-w4g6-3g8p-8mjr'

Infiniflow ragflow version 0.24.0 contains an incorrect access control vulnerability in the run_mindmap function. This flaw allows a caller to specify an object or tenant identifier that is used in a data-access operation without proper ownership, tenant, workspace, or membership verification. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level.