The Commit Company Raven authorization issue vulnerability

The Commit Company Raven 2.0.0 to 3.0.0 versions have an authorization issue vulnerability. This vulnerability stems from legacy methods in Raven/api/Ravenmessage.py that bypass the workspace membership check, resulting in insufficient authorization verification. Non-members who are authenticated...

Flowise security vulnerabilities

Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Versions of Flowise prior to 3.1.2 contained a security vulnerability, which stemmed from issues with batch assignment during the creation and updating of DatasetRows. This vulnerability could le...

Flowise Access Control Vulnerability

Flowise is an open-source tool developed by FlowiseAI, designed for easily building LLM applications. Prior to Flowise 3.1.0, there was an access control vulnerability. This vulnerability stemmed from a batch assignment vulnerability in the DocumentStore creation endpoints, allowing authenticated...