Skip to content
OpenAdvisories

Product · FlowCI

flow-core-x

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.0
    CVE-2026-124330

    FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal

    A vulnerability was determined in FlowCI flow-core-x up to 1.23.49. This affects the function exist/save/read/remove of the file store/src/main/java/com/flowci/store/LocalFileManager.java of the component LocalFileManager. This manipulation of the argument fi…

    FlowCI flow-core-x
  • Medium 5.0
    CVE-2026-124329

    FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal

    A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper.unzip of the file common/src/main/java/com/flowci/common/helper/FileHelper.java. The manipulation results in path traversal. The attack may be perfo…

    FlowCI flow-core-x
  • Medium 6.3
    CVE-2026-4215

    FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery

    A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of the file core/src/main/java/com/flowci/core/config/service/ConfigServiceImpl.java of the component SMTP Host Handler. The manipulation result…

    FlowCI flow-core-x