Skip to content
OpenAdvisories

Product · Algosec

Algosec FireFlow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2023-46596

    Improper input validation in FireFlow’s VisualFlow workflow editor

    Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60 permits an attacker to initiate an XSS attack by injecting malicious executable scripts into the appl…

    Algosec Algosec FireFlow
  • Medium 5.9
    CVE-2023-46595

    Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor

    Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above), A32.50 (b390 or above)

    Algosec Algosec FireFlow