Lucene search
GoogleOSV:GHSA-2Q4W-X8H2-2FVHHistoryAug 27, 2024 - 3:32 p.m.
Flowise Authentication Bypass vulnerability
2024-08-2715:32:49
Google
osv.dev
7
flowise
authentication bypass
vulnerability
version 1.8.2
remote attacker
api endpoints
administrator
restricted functionality
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0.006
Percentile
78.6%
An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.
Related
cvelist
cvelist
CVE-2024-8181 Flowise Authentication Bypass
2024-08-27 13:10:40
osv
osv
CVE-2024-8181
2024-08-27 13:15:06
cve
cve
CVE-2024-8181
2024-08-27 13:15:06
github
github
Flowise Authentication Bypass vulnerability
2024-08-27 15:32:49
nvd
nvd
CVE-2024-8181
2024-08-27 13:15:06
vulnrichment
vulnrichment
CVE-2024-8181 Flowise Authentication Bypass
2024-08-27 13:10:40
veracode
veracode
Authentication Bypass
2024-08-28 04:19:13
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.9
Confidence
Low
EPSS
0.006
Percentile
78.6%
Related for OSV:GHSA-2Q4W-X8H2-2FVH