Server-Side Request Forgery (SSRF) in langgenius/dify
CVE-2025-0184 has a selected CVSS score of 6.5 (medium); EIP currently links 1 repository PoC and 1 lab environment.
A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests' module instead of the 'ssrf_proxy', leading to an SSRF vulnerability. This issue was fixed in version 0.11.0.
| Product | Source | Version range | Status |
|---|---|---|---|
langgenius/difyBrowse langgenius / langgenius/dify | CVE List | Before 0.11.0 | affected |
A Docker Compose environment for a CTF challenge exploiting CVE-2025-0184, a DOCX SSRF vulnerability. It includes a main web server, internal services (admin, database, cache, metrics), Redis, and an optional Portainer container.
docker-compose.yml:1-126The environment is explicitly described as a CTF challenge for CVE-2025-0184. The README states it is a 'CVE-2025-0184 DOCX SSRF CTF Challenge' and provides an exploit generator. The main application (src/app.py) contains intentional SSRF vulnerabilities and a flag to capture.
README.md:1-33src/app.py:1-328Main Flask web application on port 8080 (mapped to host 13687). Accepts DOCX file uploads, extracts external relationships, and makes SSRF requests to the extracted URLs. Requires a hardcoded hash key for authentication. Contains a flag in environment variable FLAG.
docker-compose.yml:5-24src/app.py:1-328Internal Flask admin service on port 3003. Returns a flag when accessed with the correct admin token. Not exposed externally; reachable only from within the Docker network.
docker-compose.yml:26-38src/admin_service.py:1-96Internal service on port 3001, built from Dockerfile.internal. Provides generic service info endpoints. No flag or sensitive data visible.
docker-compose.yml:40-51src/internal_service.py:1-115Internal service on port 3002, built from Dockerfile.internal. Provides generic service info endpoints.
docker-compose.yml:53-64src/internal_service.py:1-115Internal service on port 3004, built from Dockerfile.internal. Provides generic service info endpoints.
docker-compose.yml:66-77src/internal_service.py:1-115Redis 7 Alpine container, exposed on port 6379 within the network. Described as optional for session management.
docker-compose.yml:80-89Portainer CE container, only started with the 'dev' profile. Mounts the Docker socket, providing host Docker management. Not part of the core challenge.
docker-compose.yml:92-103Supported by supplied evidence
The environment is explicitly built around CVE-2025-0184. The main application (src/app.py) implements a DOCX SSRF vulnerability, extracting URLs from DOCX relationships and making requests to them, which matches the described CVE. The README and exploit generator confirm the association.
src/app.py:1-328README.md:1-33exploits/exploit_generator.py:1-93README.md:5-10src/app.py:44templates/index.html:300exploits/exploit_generator.py:1-93README.md:5-10templates/index.html:300exploits/exploit_generator.py:1-93src/app.py:200-250src/app.py:150-170All visible behavior is directed at the intended lab target (internal services). The SSRF requests are made to internal Docker network addresses. The Portainer container with Docker socket access is optional and only active in the 'dev' profile, which is a legitimate development tool. No evidence of host escape, external connections, persistence, credential theft, or destructive behavior beyond the lab scope.
docker-compose.yml:1-126src/app.py:1-328This review is limited to the supplied lab evidence packet. It does not assert that the environment runs, reproduces a vulnerability, or is safe to execute. Contract: eip-docker-lab-analysis-v1.