SERVER-WEBAPP FlowiseAI Flowise V1 API cross site scripting attempt

IPS-NPA

3 SIDs: 65381, 65382, 65383

Description

Detects an attempt to exploit CVE-2024-37146, and CVE-2024-36422, a cross-site scripting flaw that can run malicious script in victims' browsers in FlowiseAI Flowise V1 API.

CVEs

CVE-2024-37146 CVE-2024-36422

References

securitylab.github.com