CVE-2024-31621

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component

High · published April 29, 2024

Patch now

High probability of exploitation

CVSS calls it high at 7.6. It sits in the 99.1th percentile for exploit probability.

CVSS v3.1
7.6
EPSS
60%
Percentile
99.1
In the wild
Unconfirmed
What it is

An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.59867 · 99.1th percentile
Published
2024-04-29T00:00Z
EPSS history
Timeline
  • 29 APR 00:00Z
    An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the api/v1 component
    cvelistv5