Threats tagged 'ghsa-3qmj-rc63-mhjw'

A vulnerability in FlowiseAI Flowise up to version 3.0.12 allows remote attackers to bypass authorization by manipulating userId, organizationId, workspaceId, or email parameters in the User Controller Handler component. This issue can lead to unauthorized access but does not impact data confidentiality, integrity, or availability beyond limited information disclosure. The vulnerability has a medium severity rating and requires upgrading the affected component to mitigate the risk.