Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
added 2026/05/14 4:19 p.m.15 views

FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover

Summary Type: Mass assignment via Object.assignentity, body - client-controlled workspaceId and on create, id overwritten on the DatasetRow entity - cross-workspace data takeover and IDOR. File: packages/server/src/services/dataset/index.ts Root cause: The DatasetRow controller/service constructs...

8.8CVSS6AI score0.00342EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder