CVE-2024-11850 Stored XSS in langgenius/dify

Medium 6.8 Published 20 Mar 2025 Updated 20 Mar 2025

Attackers can inject malicious SVG content into chatbot features to execute JavaScript against admins, risking credential theft.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2024-11850?

CVE-2024-11850 is a medium-severity cross-site scripting vulnerability in langgenius/dify, published on 20 Mar 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

A stored cross-site scripting (XSS) vulnerability exists in the latest version of langgenius/dify. The vulnerability is due to improper validation and sanitization of user input in SVG markdown support within the chatbot feature. An attacker can exploit this vulnerability by injecting malicious SVG content, which can execute arbitrary JavaScript code when viewed by an admin, potentially leading to credential theft.

Weakness: CWE-79

Which versions are affected by CVE-2024-11850?

It affects 1 product.

Products include Langgenius Dify.

How do I fix CVE-2024-11850?

No fix has been published for CVE-2024-11850 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2024-11850 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-11850 exists.

Sources

Also known as GHSA-7j9v-mc62-mcm5.