Skip to content
OpenAdvisories

Product · Rheosoph

flow-like

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.2

    Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only users

    Flow-Like is a platform for building end-to-end use cases. Prior to version 1.0.4, `GET /api/v1/apps/{app_id}/invoke/presign` grants Azure Blob Storage SAS credentials with write and delete access to app content to any app member that has `ExecuteEvents`, eve…