Skip to content
OpenAdvisories

Vendor

FlowiseAI

121 known vulnerabilities.

121 results · Feed

  • High 7.5
    CVE-2024-36420 Public exploit Scanner template

    GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file

    Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the `/api/v1/openai-assistants-file` endpoint in `index.ts` is vulnerable to arbitrary file read due to lack of sanitization of the `fileName…