漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery
Vulnerability Description
A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
langfuse 代码问题漏洞
Vulnerability Description
langfuse是Langfuse开源的一个大语言模型工程平台。 langfuse 3.88.0及之前版本存在代码问题漏洞，该漏洞源于对文件web/src/features/prompts/server/routers/promptRouter.ts中函数promptChangeEventSourcing的错误操作导致服务端请求伪造。
CVSS Information
N/A
Vulnerability Type
N/A