Advisories · Technology
FlowCI flow-core-x.
Every CVE that names FlowCI flow-core-x among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal
- FlowCI flow-core-x
- Path traversal
- CVSS 2.3 Low
FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal
- FlowCI flow-core-x
- Path traversal
- CVSS 5.3 Medium
FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection
- FlowCI flow-core-x
- Other injection
- Code injection
- CVSS 5.3 Medium
FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery
- FlowCI flow-core-x
- Server-side request forgery (SSRF)