Catalin Cimpanu on Nostr: Tenable's Joshua Martinelle has published a write-up on CVE-2024-31621, an ...

Tenable's Joshua Martinelle has published a write-up on CVE-2024-31621, an authentication bypass in FlowiseAI, an open-source tool for building conversational AI applications and chatbots: https://medium.com/tenable-techblog/cve-2024-8182-accidental-discovery-of-an-unauthenticated-dos-1d89947a09a4

Exploit code for this has been available online since April: https://www.exploit-db.com/exploits/52001