提交 #748219: mindsdb v25.14.1 SSRF
| 标题 | mindsdb v25.14.1 SSRF |
|---|---|
| 描述 | A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload functionality of MindsDB Editor. Due to improper URL validation, an attacker can bypass blacklist restrictions and trigger arbitrary internal network requests. |
| 来源 | ⚠️ https:/ |
| 用户 | fushuling (UID 45488) |
| 提交 | 2026-01-28 13時55分 (9 月前) |
| 管理 | 2026-02-15 10時04分 (18 days later) |
| 状态 | 已接受 |
| VulDB条目 | 346119 [MindsDB 直到 25.14.1 File Upload security.py clear_filename 权限提升] |
| 积分 | 15 |