Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Flowring Technology Agentflow 4.0 2023/03/24 Clear all filters
TI-2026-63779 CVE-2026-96440 · GHSA-4f4p-4qgh-w24r

Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）

Priority LOW 31

Improper Limitation of a Pathname to a Restricted Directory（Path Traversal） in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00292 Published 2026-09-29 Fixed in 2023/03/24 CWE-22
TI-2026-63778 CVE-2026-96431 · GHSA-gchq-2h86-x245

Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type

Priority MEDIUM 42

Unrestricted Upload of File with Dangerous Type in the /WebAgenda/download/uploadFile.jsp API endpoint of Flowring Agentflow 4.0 version before 2023/03/24 allows remote authenticated users to execute arbitrary system com…

CVSS 4.0CRITICAL 9.3 Network Low privileges No interaction EPSS 0.003 Published 2026-09-29 Fixed in 2023/03/24 CWE-434