Agentflow developed by Flowring has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality.
Weakness
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Agentflow | Flowring | - (including) | - (including) |
Potential Mitigations
Related Attack Patterns
References
- https://forum.flowring.com/post/view?bid=72\u0026id=45611\u0026tpg=1\u0026ppg=1\u0026sty=1#45939
- https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html
- https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html