CVE-2024-31621

creationtimestamp| type| source ---|---|--- 2024-05-02 20:57:12+00:00| seen| https://t.me/arpsyndicate/4898 2024-09-25 13:52:39+00:00| seen| https://t.me/kasperskyb2b/1426...

CVE-2024-31621

FlowiseAI Inc Flowise versions prior to 1.8.1 (specifically versions 1.6.5 and before) are vulnerable to an authentication bypass and code injection . The root cause is a case-sensitivity issue where the application checks for lowercase /api/v1/ to apply authentication middleware; however, using ...

Flowise 1.6.5 - Authentication Bypass Vulnerability

Exploit Title: Flowise 1.6.5 - Authentication Bypass Exploit Author: Maerifat Majeed Vendor Homepage: https://flowiseai.com/ Software Link: https://github.com/FlowiseAI/Flowise/releases Version: 1.6.5 Tested on: mac-os CVE : CVE-2024-31621 The flowise version if req.url.includes'/api/v1/'...

Flowise 1.6.5 Authentication Bypass

Exploit Title: Flowise 1.6.5 - Authentication Bypass Date: 17-April-2024 Exploit Author: Maerifat Majeed Vendor Homepage: https://flowiseai.com/ Software Link: https://github.com/FlowiseAI/Flowise/releases Version: 1.6.5 Tested on: mac-os CVE : CVE-2024-31621 The flowise version if...