• caglararli@hotmail.com
  • 05386281520

CVE-2024-37146 | FlowiseAI Flowise up to 1.4.3 404 Page /api/v1/credentials/id cross site scripting (GHSL-2023-232)

Çağlar Arlı      -    34 Views

CVE-2024-37146 | FlowiseAI Flowise up to 1.4.3 404 Page /api/v1/credentials/id cross site scripting (GHSL-2023-232)

A vulnerability, which was classified as problematic, has been found in FlowiseAI Flowise up to 1.4.3. Affected by this issue is some unknown functionality of the file /api/v1/credentials/id of the component 404 Page. The manipulation leads to cross site scripting. This vulnerability is handled as CVE-2024-37146. The attack may be launched remotely. There is no exploit available.