Lucene search
K

CVE-2024-31621

🗓️ 29 Apr 2024 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 686 Views🌐 WEB

Issue in FlowiseAI Inc Flowise v.1.6.2, allows remote code execution via crafted scrip

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Flowise 1.6.5 - Authentication Bypass Vulnerability
21 Apr 202400:00
zdt
Circl
CVE-2024-31621
2 May 202420:57
circl
CNNVD
Flowise 安全漏洞
21 Apr 202400:00
cnnvd
Cvelist
CVE-2024-31621
29 Apr 202400:00
cvelist
Exploit DB
Flowise 1.6.5 - Authentication Bypass
21 Apr 202400:00
exploitdb
Github Security Blog
Flowise vulnerable to code injection via api/v1
29 Apr 202418:30
github
Nuclei
Flowise 1.6.5 - Authentication Bypass
10 Jun 202605:11
nuclei
NVD
CVE-2024-31621
29 Apr 202417:15
nvd
OSV
GHSA-6WP6-22X5-RR3W Flowise vulnerable to code injection via api/v1
29 Apr 202418:30
osv
Packet Storm
Flowise 1.6.5 Authentication Bypass
19 Apr 202400:00
packetstorm
Rows per page
NVD
Vulnrichment
Node
flowiseaiflowiseRange1.6.5
ParameterPositionPathDescriptionCWE
credentialspath/Api/v1/credentialsAuthentication bypass via case-sensitive /api/v1 endpoint; POC demonstrates bypass using /Api/v1/credentialsCWE-94

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 May 2025 13:44Current
7.7High risk
Vulners AI Score7.7
CVSS 3.17.6
EPSS0.77829
SSVC
686