Описание
Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code. NOTE: the Supplier reports that the Docker configuration does not make PostgreSQL (on TCP port 5432) exposed by default in version 1.0.1 or later.
Ссылки
- Broken Link
- ExploitMitigationThird Party Advisory
- Product
- ExploitMitigationThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.5.1 (включая)
cpe:2.3:a:langgenius:dify:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 28%
0.001
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-798
Связанные уязвимости
CVSS3: 9.8
github
около 2 месяцев назад
Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code.
EPSS
Процентиль: 28%
0.001
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-798