Lucene search
+L

29 matches found

Github Security Blog
Github Security Blog
added 2026/05/14 4:19 p.m.18 views

FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover

Summary Type: Mass assignment via Object.assignentity, body - client-controlled workspaceId and on create, id overwritten on the Evaluator entity - cross-workspace data takeover and IDOR. File: packages/server/src/Interface.Evaluation.ts Root cause: The Evaluator controller/service constructs a n...

8.8CVSS5.9AI score0.00335EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder