Flowise 1.4.3 - Arbitrary File Read via OpenAI Assistants File Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-36420. PoCs published by fineman999. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional Nuclei template and Docker-based lab for CVE-2024-36420, an arbitrary file read vulnerability in Flowise 1.4.3 via unsanitized fileName parameter in the /api/v1/openai-assistants-file endpoint. The PoC includes detailed reproduction steps and validation against both vulnerable and patched versions.
Description
Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the `/api/v1/openai-assistants-file` endpoint in `index.ts` is vulnerable to arbitrary file read due to lack of sanitization of the `fileName` body parameter. No known patches for this issue are available.
Exploits (1)
This repository contains a functional Nuclei template and Docker-based lab for CVE-2024-36420, an arbitrary file read vulnerability in Flowise 1.4.3 via unsanitized fileName parameter in the /api/v1/openai-assistants-file endpoint. The PoC includes detailed reproduction steps and validation against both vulnerable and patched versions.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N