Description (CNA)
A weakness has been identified in FlowiseAI Flowise up to 3.0.12. Affected by this vulnerability is an unknown functionality of the component User Controller Handler. This manipulation of the argument userId/organizationId/workspaceId/email causes authorization bypass. The attack may be initiated remotely. The affected component should be upgraded.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| FlowiseAI / Flowise | affected 3.0.0; affected 3.0.1; affected 3.0.2; affected 3.0.3; affected 3.0.4; affected 3.0.5; affected 3.0.6; affected 3.0.7; affected 3.0.8; affected 3.0.9; affected 3.0.10; affected 3.0.11; affected 3.0.12 |
CWE
CWE-639, CWE-285
References
- https://vuldb.com/vuln/361274
- https://vuldb.com/vuln/361274/cti
- https://vuldb.com/submit/777657
- https://gist.github.com/YLChen-007/3584e6ffa0bba6367328ecf0b46b0e4b
ADP enrichment
No English description supplied.