Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:flowiseai:flowise:*:*:*:*:enterprise:*:*:*

1 brief RSS
high advisory

Flowise Cross-Tenant Authorization Vulnerability

Flowise versions before 3.1.4 contain authorization gaps in Enterprise endpoints that allow authenticated users to perform cross-tenant operations including unauthorized workspace deletion and SSO credential access.

Flowise Enterprise +1 path-traversal arbitrary-file-write rce xss vulnerability nosql-injection web-application ssrf +3
4t 1c