Threats tagged 'ghsa-grch-cc26-w2fv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.9%	CVE-2025-71333Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments Critical9.8EPSS 0.9%2026-06-26GCVE DatabaseCVE-2025-71333 Flowise versions through 2.2.4 have an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local. This vulnerability allows attackers to exploit path traversal in the chatId and chatflowId parameters to upload malicious files to arbitrary directories. Successful exploitation could lead to remote code execution and server compromise. EPSS 0.9%Vulnerability CWE-73 #ghsa-grch-cc26-w2fv	GCVE Database	2026-06-26

Page 1 of 1