2 matches found
GHSA-9HRV-GVRV-6GF2 Flowise Execute Flow function has an SSRF vulnerability
Summary The attacker provides an intranet address through the base url field configured in the Execute Flow node ā Bypass checkDenyList / resolveAndValidate in httpSecurity.ts not called ā Causes the server to initiate an HTTP request to any internal network address, read cloud metadata, or detec...
6CVSS5.8AI score0.00214EPSS
SaveExploits1References2
20