Skip to content
Threat Feed
Subscribe

Vendor

Mistral.rs

1 brief RSS
high advisory

Unauthenticated SSRF and Local File Enumeration in mistral.rs

The mistralrs-server-core component allows unauthenticated attackers to perform SSRF and enumerate local files via unvalidated image_url and audio_url message parameters.

mistralrs-server-core ssrf file-enumeration denial-of-service webserver
1r 2t