CVE-2024-12779: SSRF in infiniflow/ragflow

Published Mar 20, 2025

Updated

A Server-Side Request Forgery (SSRF) vulnerability exists in infiniflow/ragflow version 0.12.0. The vulnerability is present in the POST /v1/llm/addllm and POST /v1/conversation/tts endpoints. Attackers can specify an arbitrary URL as the apibase when adding an OPENAITTS model, and subsequently access the tts REST API endpoint to read contents from the specified URL. This can lead to unauthorized access to internal web resources.

Affected Software

2 affected components

infiniflow ragflow

infiniflow ragflow=0.12.0

Event History

Mar 20, 2025

CVE Published

via MITRE·10:11 AM

Data Sourced

via MITRE·10:11 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-12779?

The severity of CVE-2024-12779 is categorized as high due to its potential for exploitation through Server-Side Request Forgery.

How do I fix CVE-2024-12779?

To fix CVE-2024-12779, update the infiniflow/ragflow to a version that has patched the vulnerability.

What are the affected endpoints for CVE-2024-12779?

The affected endpoints for CVE-2024-12779 are POST /v1/llm/add_llm and POST /v1/conversation/tts.

What type of vulnerability is CVE-2024-12779?

CVE-2024-12779 is classified as a Server-Side Request Forgery (SSRF) vulnerability.

Who is affected by CVE-2024-12779?

Users of infiniflow/ragflow version 0.12.0 are affected by CVE-2024-12779.