Lucene search
GoogleOSV:CVE-2024-8181HistoryAug 27, 2024 - 1:15 p.m.
CVE-2024-8181
2024-08-2713:15:06
Google
osv.dev
1
authentication
bypass
flowise
remote attacker
unauthenticated
api
administrator
restricted functionality
software
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.6%
An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.
Related
osv
osv
Flowise Authentication Bypass vulnerability
2024-08-27 15:32:49
cvelist
cvelist
CVE-2024-8181 Flowise Authentication Bypass
2024-08-27 13:10:40
github
github
Flowise Authentication Bypass vulnerability
2024-08-27 15:32:49
nvd
nvd
CVE-2024-8181
2024-08-27 13:15:06
vulnrichment
vulnrichment
CVE-2024-8181 Flowise Authentication Bypass
2024-08-27 13:10:40
veracode
veracode
Authentication Bypass
2024-08-28 04:19:13
cve
cve
CVE-2024-8181
2024-08-27 13:15:06
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.006
Percentile
78.6%
Related for OSV:CVE-2024-8181