{
 "id": "AIR-2025-0493",
 "slug": "cve-2025-58747-cross-site-scripting-vulnerability-in-dify-mc",
 "title": "CVE-2025-58747: Cross-site scripting vulnerability in Dify MCP OAuth component",
 "summary": "Dify versions through 1.9.1 contain a cross-site scripting vulnerability in the MCP OAuth component due to unvalidated authorization URLs returned by remote MCP servers. Attackers can exploit this by returning malicious JavaScript URIs during server connection.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Dify"
 ],
 "incident_date": "2025-10-17",
 "incident_date_precision": "day",
 "first_reported": "2025-10-17",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-58747",
   "publisher": "NVD",
   "title": "CVE-2025-58747: Dify is an LLM application development platform.",
   "published_at": "2025-10-17"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-58747",
  "xss"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}