← Database

CVE-2024-8182

HIGH CVSS: 7.5 Published: 2024-08-27 Modified: 2026-06-17

Description

An Unauthenticated Denial of Service (DoS) vulnerability exists in Flowise version 1.8.2 leading to a complete crash of the instance running a vulnerable version due to improper handling of user supplied input to the “/api/v1/get-upload-file” api endpoint.

Affected Platforms

Flowiseai Flowise

Weakness Type

NVD-CWE-noinfo, CWE-400

References