← CVE Intelligence

CVE-2023-46595

Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor PUBLISHED

Description (CNA)

Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above), A32.50 (b390 or above)

Affected (CNA)

Vendor / productVersions
Algosec / Algosec FireFlowaffected A32.20, A32.50

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.