CyberSecBulletin

Spider-flow vulnerabilities

We track 2 vulnerabilities in Spider-flow products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 2, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Spider-flow vulnerabilities

  • 9.8 Critical severity

    spider-flow: Improper Control of Generation of Code

    CVE-2024-0195Spider-flowEPSS 19.3%

    A vulnerability, which was classified as critical, was found in spider-flow 0.4.3. Affected is the function FunctionService.saveFunction of the file src/main/java/org/spiderflow/controller/FunctionController.java. The manipulation leads to code injection. It i

  • 9.8 Critical severity

    spider-flow: Deserialization of Untrusted Data

    CVE-2023-5016Spider-flowEPSS 1.02%

    A vulnerability was found in spider-flow up to 0.5.0. It has been declared as critical. Affected by this vulnerability is the function DriverManager.getConnection of the file src/main/java/org/spiderflow/controller/DataSourceController.java of the component AP