CVE-2024-8182 — Flowise Denial of Service

CVE-2024-8182

Flowise Denial of Service PUBLISHED

Description (CNA)

An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the “/api/v1/get-upload-file” api endpoint.

Affected (CNA)

Vendor / product	Versions
FlowiseAI / Flowise	affected 1.8.2

CWE

No CWE identifiers supplied.

References

https://tenable.com/security/research/tra-2024-34

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.