CVE-2024-9148criticalCWE-79

CVE-2024-9148: critical vulnerability in FlowiseAI FlowiseChatEmbed

Flowise Stored Cross-Site Scripting

Published 24 Sep 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.6epss 0.6%

Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

References