CVE-2024-31621

FlowiseAI Inc Flowise versions prior to 1.8.1 (specifically versions 1.6.5 and before) are vulnerable to an authentication bypass and code injection . The root cause is a case-sensitivity issue where the application checks for lowercase /api/v1/ to apply authentication middleware; however, using ...