p PatchFirst

CVE-2024-8182

CVE-2024-8182 · Flowise Denial of Service

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the “/api/v1/get-upload-file” api endpoint.

CVSS 7.5 · High · EPSS 13.9%

Published
Updated

Stack: node

Affected products and versions

  • flowise

    Versions
    • 1.8.2: Affected

    No fix published

  • flowise npm

    Affected ranges
    • SEMVER: ≤ 1.8.2

    No fix published

Original sources

Check your server →