Lucene search
GoogleOSV:CVE-2024-9148HistorySep 25, 2024 - 1:15 a.m.
CVE-2024-9148
2024-09-2501:15:49
Google
osv.dev
flowise chat embed
stored cross-site
input sanitization
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
6.3
Confidence
High
Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0.
Related
nvd
nvd
CVE-2024-9148
2024-09-25 01:15:49
osv
osv
Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting
2024-09-25 03:30:36
cvelist
cvelist
CVE-2024-9148 Flowise Stored Cross-Site Scripting
2024-09-24 13:13:13
github
github
Flowise and Flowise Chat Embed vulnerable to Stored Cross-site Scripting
2024-09-25 03:30:36
cve
cve
CVE-2024-9148
2024-09-25 01:15:49
vulnrichment
vulnrichment
CVE-2024-9148 Flowise Stored Cross-Site Scripting
2024-09-24 13:13:13
CVSS3
9.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
AI Score
6.3
Confidence
High
Related for OSV:CVE-2024-9148