Описание
A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packages/server/src/enterprise/services/account.service.ts of the component API Response Handler. The manipulation results in information disclosure. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is told to be difficult. You should upgrade the affected component.
Ссылки
- ExploitThird Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
- Permissions RequiredVDB Entry
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.0.12 (включая)
cpe:2.3:a:flowiseai:flowise:*:*:*:*:*:*:*:*
EPSS
Процентиль: 18%
0.00259
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
2.6 Low
CVSS2
Дефекты
CWE-200
CWE-312
Связанные уязвимости
EPSS
Процентиль: 18%
0.00259
Низкий
3.7 Low
CVSS3
5.3 Medium
CVSS3
2.6 Low
CVSS2
Дефекты
CWE-200
CWE-312