CVE-2025-57164 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.
Medium CVSS: 6.5

CVE-2025-57164

Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.
Vendor
Flowiseai
Product
Flowise
CWE
CWE-77
Yayın Tarihi
2025-10-17 18:15:37
Güncelleme
2025-10-23 12:33:49
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-77 Flowise MEDIUM Flowiseai 2025

Referanslar

https://github.com/FlowiseAI/Flowise https://github.com/FlowiseAI/Flowise/blob/main/packages/components/nodes/vectorstores/Supabase/Supabase.ts#L237 https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7944-7c6r-55vv