GHSA-48x4-mx8f-gr4h

Flowise Unauthenticated Denial of Service (DoS) vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-8182

Packages

Ecosystem	Package	Affected	Fixed in
npm	flowise	<= 1.8.2	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the `/api/v1/get-upload-file` api endpoint.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2024-8182 advisory
https://github.com/FlowiseAI/Flowise package
https://tenable.com/security/research/tra-2024-34 web