| शीर्षक | mindsdb v25.14.1 SSRF |
|---|
| विवरण | A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload functionality of MindsDB Editor. Due to improper URL validation, an attacker can bypass blacklist restrictions and trigger arbitrary internal network requests. |
|---|
| स्रोत | ⚠️ https://github.com/mindsdb/mindsdb/issues/12163 |
|---|
| उपयोगकर्ता | fushuling (UID 45488) |
|---|
| सबमिशन | 28/01/2026 01:55 PM (8 महीनों पहले) |
|---|
| संयम | 15/02/2026 10:04 AM (18 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 346119 [MindsDB तक 25.14.1 File Upload security.py clear_filename अधिकार वृद्धि] |
|---|
| अंक | 15 |
|---|