Security Advisory

CVE-2025-29720

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-14 00:00:00

Last updated 2025-04-14 18:20:17

Assigner mitre

State PUBLISHED

Dify v1.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi.