{"cvss":5.3,"datePublished":"","dateUpdated":"","description":"Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi.... | Affected: Dify / Dify | CVSS: 5.3 (MEDIUM) | EPSS: 0.00696 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2025-56520","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Dify","severity":"MEDIUM","source":"circl_kev","title":"CVE-2025-56520","vendor":""}