CVE-2025-33203: CVE-2025-33203: sunucu taraflı istek sahteciliği (SSRF)

Açıklama (NVD)

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service.

Özet bilgiler

CVSS v3.1

7.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

EPSS

%0,31 (yüzdelik 24)

CWE

CWE-918

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• nvd.nist.gov
• nvidia.custhelp.com
• www.cve.org
• CWE-918