Skip to content
OpenAdvisories

Vendor

flowintel

14 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    Flowintel Fails to Invalidate Active Sessions After Password Change

    Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their…