漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
SSRF Vulnerability in stangirard/quivr
Vulnerability Description
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated to send HTTP requests to arbitrary URLs, thereby facilitating SSRF attacks. The affected code is located in the backend/routes/crawl_routes.py file, specifically within the crawl_endpoint function. This issue could allow attackers to interact with internal services that are accessible from the server hosting the application.
CVSS Information
N/A
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
Quivr 代码问题漏洞
Vulnerability Description
Quivr是Quivr开源的一个人工智能应用程序。 Quivr 存在代码问题漏洞，该漏洞源于 crawl_endpoint 函数中存在服务器端请求伪造漏洞。
CVSS Information
N/A
Vulnerability Type
N/A