high7.5
CVE-2024-8182
Flowise Unauthenticated Denial of Service (DoS) vulnerability
Impact
An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the `/api/v1/get-upload-file` api endpoint.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | flowise | <= 1.8.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flowiseai | Flowise | Version 1.8.2 |