CVE-2024-36422 | FlowiseAI Flowise up to 1.4.3 404 Page api/v1/chatflows/id cross site scripting (GHSL-2023-232)

A vulnerability was found in FlowiseAI Flowise up to 1.4.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file api/v1/chatflows/id of the component 404 Page. The manipulation leads to cross site scripting.

This vulnerability is known as CVE-2024-36422. The attack can be launched remotely. There is no exploit available.