Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p79h-rmmr-jmr7

Опубликовано: 17 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.2
CVSS3: 8.1

Описание

Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information, thereby logging into the system as any user. Attacker must first obtain an user ID in order to exploit this vulnerability.

Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information, thereby logging into the system as any user. Attacker must first obtain an user ID in order to exploit this vulnerability.

EPSS

Процентиль: 32%
0.00126
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-321

Связанные уязвимости

CVSS3: 8.1
nvd
4 месяца назад

Agentflow developed by Flowring has an Use of Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information, thereby logging into the system as any user. Attacker must first obtain an user ID in order to exploit this vulnerability.

EPSS

Процентиль: 32%
0.00126
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-321