Lucene search
TenableVULNRICHMENT:CVE-2024-9148HistorySep 24, 2024 - 1:13 p.m.
CVE-2024-9148 Flowise Stored Cross-Site Scripting
2024-09-2413:13:13
CWE-79
tenable
github.com
4
flowise
stored cross-site scripting
vulnerability
input sanitization
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.6%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
total
Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*"
],
"vendor": "flowiseai",
"product": "flowise",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.0.0",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2024-9148
2024-09-25 01:15:49
cvelist
cvelist
CVE-2024-9148 Flowise Stored Cross-Site Scripting
2024-09-24 13:13:13
cve
cve
CVE-2024-9148
2024-09-25 01:15:49
github
github
Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting
2024-09-25 03:30:36
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
6.4
Confidence
High
EPSS
0
Percentile
9.6%
SSVC
Exploitation
poc
Automatable
no
Technical Impact
total
Related for VULNRICHMENT:CVE-2024-9148