CVE-2025-51462 | RAGFlow 0.17.2 api.apps.dialog_app.set_dialog assistant greeting cross site scripting

A vulnerability was found in RAGFlow 0.17.2. It has been classified as problematic. This affects the function api.apps.dialog_app.set_dialog. The manipulation of the argument assistant greeting leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2025-51462. It is possible to initiate the attack remotely. There is no exploit available.