CVE ID :CVE-2025-71332 Published : June 24, 2026, 11:53 a.m. | 1 hour, 17 minutes ago Description :Flowise through 2.2.7 contains a SQL injection vulnerability in the importChatflows API. Due to insufficient validation of the chatflow.id value, an authenticated user can supply a crafted JSON...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71332 - Flowise - SQL Injection in importChatflows API via chatflow.id Parameter

VERWANDTEARTIKEL

PoC Exploit Released for Microsoft Exchange Server Elevation of Privilege Vulnerability

Laravel Livewire Applications Compromised to Steal Credentials Exploiting RCE Vulnerability

CVE-2026-11878 - Reflected Cross-Site Scripting vulnerability in OpenText Access Manager

CVE-2026-12537 - Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

CVE-2026-35025 - ProFTPD ACL Bypass via /proc/self/root Path Prefix in RNFR

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild