Executive brief
Flowise is a visual tool used to build AI applications and large language model workflows. A security vulnerability exists where the application fails to properly clean user-provided data before displaying it on error pages. An attacker could use this to trick users into clicking a malicious link that executes unauthorized code in their browser, potentially leading to the theft of login credentials or sensitive AI configuration data.
Technical details
A reflected cross-site scripting (XSS) vulnerability exists in Flowise version 1.4.3 and earlier within the `api/v1/chatflows/id` endpoint. The root cause is the improper neutralization of the `id` parameter; when a requested chatflow ID is not found, the server reflects the raw input back in a 404 error page with a `text/html` content type. An unauthenticated remote attacker can exploit this by crafting a malicious URL and enticing a user to visit it. Successful exploitation allows for the execution of arbitrary JavaScript in the context of the user's session, which can be used to steal sensitive information or, when chained with other vulnerabilities like path injection, facilitate unauthorized file reads from the server. As of the advisory publication, no patch is available.
Affected products
- FlowiseAI Flowise <= 1.4.3
Timeline
- 2023-11-27: disclosed: Initial report to maintainers
- 2024-07-01: advisory: NVD publication date
- 2024-08-05: advisory: GitHub advisory published