Threats tagged 'ghsa-jrmf-qwfm-2m6w'

A vulnerability in FlowiseAI Flowise up to version 3.0.12 allows remote attackers to cause information disclosure via manipulation of the verify function in the account service component. The exploit requires high attack complexity and no privileges or user interaction. The vulnerability has a low CVSS score of 3.7 and public exploit code is available. Upgrading the affected component is recommended.