CVE-2023-46229: SSRF
LangChain before 0.0.317 allows SSRF via documentloaders/recursiveurlloader.py because crawling can proceed from an external server to an internal server.
Other sources
LangChain before 0.0.317 allows SSRF via documentloaders/recursiveurlloader.py because crawling can proceed from an external server to an internal server.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46229?
CVE-2023-46229 has a medium severity rating due to the potential for Server-Side Request Forgery (SSRF) attacks.
How do I fix CVE-2023-46229?
To mitigate CVE-2023-46229, upgrade LangChain to version 0.0.317 or later.
What impact does CVE-2023-46229 have on my system?
CVE-2023-46229 may allow an attacker to exploit SSRF to access internal resources by manipulating the crawling functionality.
Which versions of LangChain are affected by CVE-2023-46229?
CVE-2023-46229 affects all LangChain versions prior to 0.0.317.
Is CVE-2023-46229 a local or remote vulnerability?
CVE-2023-46229 is considered a remote vulnerability, as it can be exploited from an external server.