Vulnerabilities > CVE-2025-43854 - Unspecified vulnerability in Langgenius Dify

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

langgenius

NVD

Published: 2025-04-28

Updated: 2025-05-12

Summary

DIFY is an open-source LLM app development platform. Prior to version 1.3.0, a clickjacking vulnerability was found in the default setup of the DIFY application, allowing malicious actors to trick users into clicking on elements of the web page without their knowledge or consent. This can lead to unauthorized actions being performed, potentially compromising the security and privacy of users. This issue has been fixed in version 1.3.0.

Vulnerable Configurations

Part	Description	Count
Application	Langgenius Langgenius Dify 0.2.1 Langgenius Dify 0.2.2 Langgenius Dify 0.3.0 Langgenius Dify 0.3.1 Langgenius Dify 0.3.2 Langgenius Dify 0.3.3 Langgenius Dify 0.3.4 Langgenius Dify 0.3.5 Langgenius Dify 0.3.6 Langgenius Dify 0.3.7 Langgenius Dify 0.3.8 Langgenius Dify 0.3.9 Langgenius Dify 0.3.10 Langgenius Dify 0.3.11 Langgenius Dify 0.3.12 Langgenius Dify 0.3.13 Langgenius Dify 0.3.14 Langgenius Dify 0.3.15 Langgenius Dify 0.3.16 Langgenius Dify 0.3.17 Langgenius Dify 0.3.18 Langgenius Dify 0.3.19 Langgenius Dify 0.3.20 Langgenius Dify 0.3.21 Langgenius Dify 0.3.22 Langgenius Dify 0.3.23 Langgenius Dify 0.3.24 Langgenius Dify 0.3.25 Langgenius Dify 0.3.26 Langgenius Dify 0.3.27 Langgenius Dify 0.3.28 Langgenius Dify 0.3.29 Langgenius Dify 0.3.30 Langgenius Dify 0.3.31 Langgenius Dify 0.3.32 Langgenius Dify 0.3.33 Langgenius Dify 0.3.34 Langgenius Dify 0.4.0 Langgenius Dify 0.4.1 Langgenius Dify 0.4.2 Langgenius Dify 0.4.3 Langgenius Dify 0.4.4 Langgenius Dify 0.4.5 Langgenius Dify 0.4.6 Langgenius Dify 0.4.7 Langgenius Dify 0.4.8 Langgenius Dify 0.4.9 Langgenius Dify 0.5.0 Langgenius Dify 0.5.1 Langgenius Dify 0.5.2 Langgenius Dify 0.5.3 Langgenius Dify 0.5.4 Langgenius Dify 0.5.5 Langgenius Dify 0.5.6 Langgenius Dify 0.5.7 Langgenius Dify 0.5.8 Langgenius Dify 0.5.9 Langgenius Dify 0.5.10 Langgenius Dify 0.5.11 Langgenius Dify 0.6.0 Langgenius Dify 0.6.1 Langgenius Dify 0.6.2 Langgenius Dify 0.6.3 Langgenius Dify 0.6.4 Langgenius Dify 0.6.5 Langgenius Dify 0.6.6 Langgenius Dify 0.6.7 Langgenius Dify 0.6.8	68

Summary

Vulnerable Configurations

References