2 matches found
GHSA-9C4C-G95M-C8CP FlowiseDB vulnerable to SQL Injection by authenticated users
Summary import functions are vulnerable. importChatflows importTools importVariables Details Authenticated user can call importChatflows API, import json file such as AllChatflows.json. but Due to insufficient validation to chatflow.id in importChatflows API, 2 issues arise. Issue 1 Bug Type 1...
5.9CVSS8.5AI score0.00516EPSS
SaveExploits1References3
20