• caglararli@hotmail.com
  • 05386281520

CVE-2024-36423 | FlowiseAI Flowise up to 1.4.3 404 Page id cross site scripting (GHSL-2023-232)

Çağlar Arlı      -    45 Views

CVE-2024-36423 | FlowiseAI Flowise up to 1.4.3 404 Page id cross site scripting (GHSL-2023-232)

A vulnerability, which was classified as problematic, was found in FlowiseAI Flowise up to 1.4.3. This affects an unknown part of the file /api/v1/public-chatflows/id of the component 404 Page. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-36423. It is possible to initiate the attack remotely. There is no exploit available.