AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

FlowiseGHSA-48x4-mx8f-gr4h

Flowise Unauthenticated Denial of Service (DoS) vulnerability

Flowise

CVE-2024-8182 · Published Aug 27, 2024

High7.5
No fix yet
GitHub advisory

An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the /api/v1/get-upload-file api endpoint.

Affected versions

PackageAffectedFixed in
flowise
npm
<= 1.8.2No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-400
Also known as
CVE-2024-8182

More Flowise advisories

All Flowise
High 7.3Aug 27, 2024Flowise Authentication Bypass vulnerabilityCVE-2024-8181no fix yetMedium 6.1Aug 5, 2024Flowise Cross-site Scripting in api/v1/chatflows/idCVE-2024-36422no fix yetMedium 6.1Aug 5, 2024Flowise Cross-site Scripting in /api/v1/chatflows-streaming/idCVE-2024-37145no fix yetMedium 6.1Aug 5, 2024Flowise Cross-site Scripting in /api/v1/public-chatflows/idCVE-2024-36423no fix yetMedium 6.1Aug 5, 2024Flowise Cross-site Scripting in/api/v1/credentials/idCVE-2024-37146no fix yetHigh 7.5Aug 5, 2024Flowise Cors Misconfiguration in packages/server/src/index.tsCVE-2024-36421no fix yet