Code Injection

2024-06-2706:50:56

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

flowise

software

input validation

api

remote attacker

code injection

7.7 High

AI Score

Confidence

Low

JSON

flowise is vulnerable to Code Injection. The vulnerability is due to improper input validation in the api/v1 endpoint, allowing a remote attacker to execute arbitrary code via a crafted script.

CPENameOperatorVersion
flowisele1.8.0
flowisele1.8.0

CPE	Name	Operator	Version
	flowise	le	1.8.0
	flowise	le	1.8.0

References

github.com/FlowiseAI/Flowise/blob/flowise-ui%401.6.5/packages/server/src/index.ts#L143

github.com/FlowiseAI/Flowise/commit/e32b64344544312bf38b3e1fefe7b26c1776a426

www.exploit-db.com/exploits/52001

7.7 High

AI Score

Confidence

Low

JSON

Related for VERACODE:47775