提出 #913327: FlowiseAI Flowise 3.0.1 => affected<=3.0.2 SSRF情報

タイトルFlowiseAI Flowise 3.0.1 => affected<=3.0.2 SSRF
説明The Flowise evaluations feature constructs the base URL for its outbound prediction requests directly from client-controlled HTTP request headers (Host and X-Forwarded-Proto). This value flows unvalidated into an axios.post() call inside EvaluationRunner, allowing an authenticated user to coerce the server into issuing HTTP POST requests to an arbitrary host of their choosing. When the evaluated chatflow has an API key configured, that key is transmitted in an Authorization: Bearer header to the attacker-chosen destination.
ソース⚠️ https://github.com/FlowiseAI/Flowise/issues/6687
ユーザー
 ZAST.AI (UID 87884)
送信2026年08月02日 16:25 (1 月 ago)
モデレーション2026年09月12日 18:41 (1 month later)
ステータス承諾済み
VulDBエントリ403165 [FlowiseAI Flowise 迄 3.0.2 Evaluations Endpoint index.ts axios.post Host/X-Forwarded-Proto 特権昇格]
ポイント20

Might our Artificial Intelligence support you?

Check our Alexa App!