Lucene search
+L

5 matches found

OSV
OSV
•added 2024/04/29 6:30 p.m.•105 views

GHSA-6WP6-22X5-RR3W Flowise vulnerable to code injection via api/v1

An issue in FlowiseAI Inc Flowise prior to v1.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component...

7.6CVSS7.6AI score0.59867EPSS
SaveExploits4References6
Github Security Blog
Github Security Blog
•added 2024/04/29 6:30 p.m.•52 views

Flowise vulnerable to code injection via api/v1

An issue in FlowiseAI Inc Flowise prior to v1.8.1 allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component...

7.6CVSS7.5AI score0.59867EPSS
SaveExploits4References6Affected Software1
Vulnrichment
Vulnrichment
•added 2024/04/29 12:00 a.m.•18 views

CVE-2024-31621

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component...

7.7AI score0.59867EPSS
SaveExploits4References2
CVE
CVE
•added 2024/04/29 12:00 a.m.•735 views

CVE-2024-31621

FlowiseAI Inc Flowise versions v.1.6.2 and before (and some sources indicate prior to v.1.8.1 ) are vulnerable to a Code Injection (CWE-94) flaw. Due to improper input validation in the api/v1 component, a remote attacker can execute arbitrary code by submitting a crafted script. Additionally, ve...

7.6CVSS7.7AI score0.59867EPSS
SaveExploits4References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•15 views

PT-2024-24158

Name of the Vulnerable Software and Affected Versions FlowiseAI Inc Flowise versions 1.6.2 and before FlowiseAI Inc Flowise versions prior to 1.8.1 Description An issue in FlowiseAI Inc Flowise allows a remote attacker to execute arbitrary code via a crafted script sent to the /api/v1 component...

7.6CVSS7.5AI score0.59867EPSS
SaveExploits4References43
Rows per page
Query Builder