Lucene search
HistoryAug 27, 2024 - 1:15 p.m.
CVE-2024-8181
authentication
bypass
flowise 1.8.2
remote attacker
api endpoints
administrator
restricted functionality
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
0.006
Percentile
78.6%
An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.
Affected configurations
Node
flowiseaiflowiseMatch1.8.2
Related
osv
osv
Flowise Authentication Bypass vulnerability
2024-08-27 15:32:49
CVE-2024-8181
2024-08-27 13:15:06
cvelist
cvelist
CVE-2024-8181 Flowise Authentication Bypass
2024-08-27 13:10:40
github
github
Flowise Authentication Bypass vulnerability
2024-08-27 15:32:49
vulnrichment
vulnrichment
CVE-2024-8181 Flowise Authentication Bypass
2024-08-27 13:10:40
veracode
veracode
Authentication Bypass
2024-08-28 04:19:13
cve
cve
CVE-2024-8181
2024-08-27 13:15:06
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS
0.006
Percentile
78.6%
Related for NVD:CVE-2024-8181