Логотип exploitDog
bind:CVE-2026-30822
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2026-30822

Количество 2

Количество 2

nvd логотип

CVE-2026-30822

около 1 месяца назад

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal database fields when creating leads. This issue has been patched in version 3.0.13.

CVSS3: 7.7
EPSS: Низкий
github логотип

GHSA-mq4r-h2gh-qv7x

около 1 месяца назад

Flowise Allows Mass Assignment in `/api/v1/leads` Endpoint

CVSS3: 7.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2026-30822

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.0.13, unauthenticated users can inject arbitrary values into internal database fields when creating leads. This issue has been patched in version 3.0.13.

CVSS3: 7.7
0%
Низкий
около 1 месяца назад
github логотип
GHSA-mq4r-h2gh-qv7x

Flowise Allows Mass Assignment in `/api/v1/leads` Endpoint

CVSS3: 7.7
0%
Низкий
около 1 месяца назад

Уязвимостей на страницу