CVE-2026-28288
Dify has a user enumeration issue
概要
Dify has a user enumeration issue
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- report github.com