Product
Dify versions prior to 1.15.0 contain a server-side request forgery (SSRF) vulnerability allowing authenticated users to access internal network services and cloud metadata via misconfigured proxy settings.