Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2023-46596

Improper input validation in FireFlow’s VisualFlow workflow editor

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
AlgoSec

Description

Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60 permits an attacker to initiate an XSS attack by injecting malicious executable scripts into the application's code. Fixed in version A32.20 (b600 and above), A32.50 (b430 and above), A32.60 (b250 and above)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Algosec Algosec FireFlow

Default version status: unaffected

  • A32.20, A32.50, A32.60affected

References