Description (CNA)
Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/FlowiseAI/Flowise
- https://github.com/FlowiseAI/Flowise/blob/main/packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237
- https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7944-7c6r-55vv
ADP enrichment
No English description supplied.
No references supplied.