repository icon
infiniflow / ragflow Project repository

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN29 DAYS

FIX

WITHIN90 DAYS

Improper Authorization in Knowledge Base Access
viliald
duplicate
High
https://github.com/infiniflow/ragflow
12end
duplicate
High
SSRF in /v1/canvas/set endpoint via Invoke components
ur10ser
not applicable
XSS via XML Document Upload
thelicato
duplicate
High
Unauthenticated Arbitrary Document Read
thelicato
duplicate
High
Arbitrary User Delete
thelicato
duplicate
High
Arbitrary File Delete
thelicato
duplicate
High
Password Hash Exposure in API Responses
md0amin
duplicate
Medium
Race Condition Vulnerability in File Upload API leads upload Exceeding File Limi...
md0amin
not applicable
API Denial of Service Vulnerability in KB Endpoint(duplicate_name function)
realsung
pending
IDOR leads to Unauthorized Modification of System Model Settings
md0amin
duplicate
High
Partial Account Takeover due to Insecure Data Querying
mq-xz
High
•$450•CVE-2024-12880
Broken Object Level Authorization (BOLA) Leading to PII Exposure
mq-xz
duplicate
Medium
Insecure Direct Object Reference (IDOR) Allows Unauthorized Updates to "System M...
mq-xz
duplicate
High
Agent Crawler Component Arbitrary File Reading Vulnerability in infiniflow/ragfl...
happyhacking-k
not applicable
Stored HTML Injection
rudransh02
duplicate
Medium
Predictable Access Tokens
sanktjodel
not applicable
IDOR to read arbitrary server files
caerry
duplicate
Medium
Blind SSRF endpoint /test_db_connect
juylang
self closed
Stored XSS in function "Create Chunk"
chucsse
informative
High
RCE by Server Side Template Injection
chucsse
not applicable
IDOR in Agent function
chucsse
spam
Knowledge Base delete function is broken
chucsse
not applicable
The dataset's file upload function has no access control
chucsse
not applicable
Unauthenticated file delete in “File Management" via IDOR
life-team2024
duplicate
Medium
Path Traversal in Input and Output Directory Parameters
3m0oo0ry
not applicable
DOM-based Cross-Site Scripting (XSS) in Document Fetch and Render Function
3m0oo0ry
not applicable
Redirect Manipulation via Error Parameter in GitHub OAuth Callback
3m0oo0ry
spam
Server-side Request Forgery (SSRF) Affecting axios package, versions >=1.3.2 <1....
3m0oo0ry
spam
Excessive CORS permissions leads to credential leakage
jackfromeast
informative
High
HTML injection in function create chunk
trungg02
informative
Medium
RAGFlow RPC Server RCE
happyhacking-k
duplicate
Critical
SVG File Upload XSS Vulnerability Leading to Unintended Redirection
sharmaraghs
duplicate
Medium
IDOR lead to change other filename
qb-u
duplicate
Medium
Business Logic
mvlttt
informative
High
IDOR leads to view other folder
gnol719
self closed
IDOR bug remove of other files
gnol719
duplicate
Critical
IDOR leads to rename of other files
gnol719
duplicate
Medium
Trigger XSS via PDF File
life-team2024
duplicate
Medium
Unauthenticated File upload via IDOR
life-team2024
duplicate
Medium
Unauthenticated File Leak via IDOR
life-team2024
not applicable
SSRF to access internal network in infiniflow/ragflow
eggdkk
duplicate
High
Unauthenticated allow download content of all the dataset on the system
trunggg02
informative
High
IDOR leads to exposing another user's dialog configuration in API /v1/dialog/get...
anhchangsoai
duplicate
Critical
IDOR leads to viewing conversations and rating thumbups of other member
anhchangsoai
duplicate
Critical
Pickle restricted_loads sanity check - proposed fix bypass, multiple methods
ehtec
informative
High
IDOR in API /v1/dialog/get leads to exposing another user's dialog configuration
quyenheu
informative
Medium
IDOR in the route thumbup leads to viewing the entire conversation and creating...
quyenheu
informative
High
IDOR lead to arbitrary access to any team
quyenheu
duplicate
High
Ragflow Signup Vulnerability Allows Admin Account Creation without Restrictions
alml-root
not applicable
Unauthenticated Remote Code Execution via local LLM RPC server
ehtec
duplicate
Critical
XSS by uploading pdf file
0xanis
Medium
•$75•CVE-2024-12871
Denial of service through converting tables in markdown file
virusday
informative
Medium
Sensitive Information Exposure - API Leaks Hashed Password in User Info Response
kevinkien
informative
Medium
Personal email account can be changed
virusday
duplicate
High
Unauthorized Access to Knowledge Base Chunk - User B Can View and Modify Chunks...
kevinkien
informative
Critical
Unauthorized Access to Knowledge Base - User B Can Access and Add file User A Da...
kevinkien
informative
Critical
An user can view any others invite list
khanhdlq
Medium
•CVE-2024-12869
Any one can delete any file of others with file's id
khanhdlq
duplicate
Critical
RCE & Full Read SSRF & Arbitrary File Read in /web_crawl endpoint
ur10ser
Medium
•$75•CVE-2024-12450
Create an Assistants with other people's Knowledge Bases without permission
hainguyen0207
informative
High
Users upload documents to other people's Knowledge Bases
hainguyen0207
informative
High
Upload any malicious file
hainguyen0207
duplicate
Medium
IDOR Functions System Model Settings
hainguyen0207
duplicate
High
Lack of permissions in the function of deleting team Joined Teams
hainguyen0207
duplicate
High
SSRF via POST /v1/llm/add_llm and /v1/conversation/tts
zpbrent
Medium
•$75•CVE-2024-12779
An unauthorized user can invite and delete members to someone else's team in inf...
meme-dm
duplicate
Medium
An unauthorized user can invite additional members to someone else's team
meme-dm
self closed
Stored XSS via assistant avatars, user avatars, and knowledge base avatars
virusday
informative
High
Race Condition Invite Team
hainguyen0207
informative
Low
IDOR- allow view/rename/delete/move any files
fewword
duplicate
High
set_api_key ssrf
wjaxx
not applicable
Email Restriction Bypass
mnqazi
informative
Medium
Stored xss via upload pdf ( pdf.js exploited)
ngostuan
duplicate
High
Unauthen to change name file in infiniflow / ragflow
thanhtung4102
not applicable
IDOR leads to the deletion of a tenant's user.
ngockhanhc311
spam
IDOR System Model Settings
hainguyen0207
self closed
Unauthen view file content in api /v1/document/get/:documentID
thanhtung4102
informative
High
IDOR view agent template in api /v1/canvas/get/:idcanvas
thanhtung4102
not applicable
IDOR leads to deletion of user files
ngockhanhc311
informative
Medium
RPC server has remote pickle attack
hexian2001
duplicate
Critical
SSRF via POST /v1/llm/add_llm and POST /v1/conversation/tts
zpbrent
not applicable
Weak password policy in account creation functionality
trungg02
spam
IDOR in the delete team member
trungg02
informative
High
Remote Code Execution via Pickle Deserialization with Hard-Coded AuthKey in RPC...
zpbrent
Critical
•$900•CVE-2024-12433
IDOR in function view update any Agent
trungg02
informative
High
IDOR in function start dataset
trungg02
duplicate
High
IDOR Allows a user to join in team without his knowledge
ahmedh404
not applicable
IDOR in function view chat
trunggg02
informative
Medium
XSS through document upload
patrik-ha
Medium
•CVE-2024-12870
CSRF on user signup endpoint
patrik-ha
informative
Medium
IDOR in function list dataset
trunggg02
informative
Medium
Upload any malicious file to the system
hainguyen0207
self closed
Unauthenticated allow view the content of all the dataset on the system
trunggg02
not applicable
XSS by uploading pdf file
0xanis
not applicable
Users upload documents to other people's Knowledge Bases
hainguyen0207
self closed
Create an Assistants with other people's Knowledge Bases without permission
hainguyen0207
self closed
IDOR in the file and folder renaming function
kienzx203
duplicate
High
Missing permissions in Configuration Permissions Knowledge Base
hainguyen0207
informative
High
IDOR leads to deletion of user files
kienzx203
duplicate
High
IDOR in the Link Knowledge Base function
tungpentest
informative
High
User removes himself from Joined Teams
hainguyen0207
self closed
IDOR leads to deletion of user files
kienzx203
self closed
IDOR in the file deletion function
ngductung
informative
Medium
RCE in /add_llm endpoint
byt3bl33d3r
High
•CVE-2024-10131