FlowiseGHSA-2q4w-x8h2-2fvh
Flowise Authentication Bypass vulnerability
High7.3CVE-2024-8181 · Published Aug 27, 2024 · updated Sep 4, 2024
An Authentication Bypass vulnerability exists in Flowise version 1.8.2. This could allow a remote, unauthenticated attacker to access API endpoints as an administrator and allow them to access restricted functionality.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| flowise npm | <= 1.8.2 | No fix yet |
Details and references
More Flowise advisories
All Flowise| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Aug 272024 | Flowise Unauthenticated Denial of Service (DoS) vulnerability High7.5Aug 27, 2024 | High7.5 | No fix yet |
| Aug 52024 | Flowise Cross-site Scripting in api/v1/chatflows/idMedium6.1Aug 5, 2024 | Medium6.1 | No fix yet |
| Aug 52024 | Flowise Cross-site Scripting in /api/v1/chatflows-streaming/idMedium6.1Aug 5, 2024 | Medium6.1 | No fix yet |
| Aug 52024 | Flowise Cross-site Scripting in /api/v1/public-chatflows/idMedium6.1Aug 5, 2024 | Medium6.1 | No fix yet |
| Aug 52024 | Flowise Cross-site Scripting in/api/v1/credentials/idMedium6.1Aug 5, 2024 | Medium6.1 | No fix yet |
| Aug 52024 | Flowise Cors Misconfiguration in packages/server/src/index.tsHigh7.5Aug 5, 2024 | High7.5 | No fix yet |