Search
Find a vulnerability
Search criteria
4 vulnerabilities by FlowCI
CVE-2026-124330 (GCVE-0-2026-124330)
Vulnerability from cvelistv5 – Published: 2026-11-08 12:15 – Updated: 2026-11-09 14:30
VLAI
EPSS
VEX
Title
FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal
Summary
A vulnerability was determined in FlowCI flow-core-x up to 1.23.49. This affects the function exist/save/read/remove of the file store/src/main/java/com/flowci/store/LocalFileManager.java of the component LocalFileManager. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-11-09 14:30 UTC
CWE
- CWE-22 - Path Traversal
Assigner
VulDB
CNA
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/432650 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/432650/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-124330 | third-party-advisory |
| https://vuldb.com/submit/1027417 | third-party-advisory |
| https://glacier-tarsal-711.notion.site/Flow-ci-Pa… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FlowCI | flow-core-x |
Affected:
1.23.0
Affected: 1.23.1 Affected: 1.23.2 Affected: 1.23.3 Affected: 1.23.4 Affected: 1.23.5 Affected: 1.23.6 Affected: 1.23.7 Affected: 1.23.8 Affected: 1.23.9 Affected: 1.23.10 Affected: 1.23.11 Affected: 1.23.12 Affected: 1.23.13 Affected: 1.23.14 Affected: 1.23.15 Affected: 1.23.16 Affected: 1.23.17 Affected: 1.23.18 Affected: 1.23.19 Affected: 1.23.20 Affected: 1.23.21 Affected: 1.23.22 Affected: 1.23.23 Affected: 1.23.24 Affected: 1.23.25 Affected: 1.23.26 Affected: 1.23.27 Affected: 1.23.28 Affected: 1.23.29 Affected: 1.23.30 Affected: 1.23.31 Affected: 1.23.32 Affected: 1.23.33 Affected: 1.23.34 Affected: 1.23.35 Affected: 1.23.36 Affected: 1.23.37 Affected: 1.23.38 Affected: 1.23.39 Affected: 1.23.40 Affected: 1.23.41 Affected: 1.23.42 Affected: 1.23.43 Affected: 1.23.44 Affected: 1.23.45 Affected: 1.23.46 Affected: 1.23.47 Affected: 1.23.48 Affected: 1.23.49 cpe:2.3:a:flowci:flow-core-x:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-124330",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-11-09T14:30:39.052714Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T14:30:47.835Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:flowci:flow-core-x:*:*:*:*:*:*:*:*"
],
"modules": [
"LocalFileManager"
],
"product": "flow-core-x",
"vendor": "FlowCI",
"versions": [
{
"status": "affected",
"version": "1.23.0"
},
{
"status": "affected",
"version": "1.23.1"
},
{
"status": "affected",
"version": "1.23.2"
},
{
"status": "affected",
"version": "1.23.3"
},
{
"status": "affected",
"version": "1.23.4"
},
{
"status": "affected",
"version": "1.23.5"
},
{
"status": "affected",
"version": "1.23.6"
},
{
"status": "affected",
"version": "1.23.7"
},
{
"status": "affected",
"version": "1.23.8"
},
{
"status": "affected",
"version": "1.23.9"
},
{
"status": "affected",
"version": "1.23.10"
},
{
"status": "affected",
"version": "1.23.11"
},
{
"status": "affected",
"version": "1.23.12"
},
{
"status": "affected",
"version": "1.23.13"
},
{
"status": "affected",
"version": "1.23.14"
},
{
"status": "affected",
"version": "1.23.15"
},
{
"status": "affected",
"version": "1.23.16"
},
{
"status": "affected",
"version": "1.23.17"
},
{
"status": "affected",
"version": "1.23.18"
},
{
"status": "affected",
"version": "1.23.19"
},
{
"status": "affected",
"version": "1.23.20"
},
{
"status": "affected",
"version": "1.23.21"
},
{
"status": "affected",
"version": "1.23.22"
},
{
"status": "affected",
"version": "1.23.23"
},
{
"status": "affected",
"version": "1.23.24"
},
{
"status": "affected",
"version": "1.23.25"
},
{
"status": "affected",
"version": "1.23.26"
},
{
"status": "affected",
"version": "1.23.27"
},
{
"status": "affected",
"version": "1.23.28"
},
{
"status": "affected",
"version": "1.23.29"
},
{
"status": "affected",
"version": "1.23.30"
},
{
"status": "affected",
"version": "1.23.31"
},
{
"status": "affected",
"version": "1.23.32"
},
{
"status": "affected",
"version": "1.23.33"
},
{
"status": "affected",
"version": "1.23.34"
},
{
"status": "affected",
"version": "1.23.35"
},
{
"status": "affected",
"version": "1.23.36"
},
{
"status": "affected",
"version": "1.23.37"
},
{
"status": "affected",
"version": "1.23.38"
},
{
"status": "affected",
"version": "1.23.39"
},
{
"status": "affected",
"version": "1.23.40"
},
{
"status": "affected",
"version": "1.23.41"
},
{
"status": "affected",
"version": "1.23.42"
},
{
"status": "affected",
"version": "1.23.43"
},
{
"status": "affected",
"version": "1.23.44"
},
{
"status": "affected",
"version": "1.23.45"
},
{
"status": "affected",
"version": "1.23.46"
},
{
"status": "affected",
"version": "1.23.47"
},
{
"status": "affected",
"version": "1.23.48"
},
{
"status": "affected",
"version": "1.23.49"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Zy0t1 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in FlowCI flow-core-x up to 1.23.49. This affects the function exist/save/read/remove of the file store/src/main/java/com/flowci/store/LocalFileManager.java of the component LocalFileManager. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.6,
"vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-08T12:15:07.142Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-432650 | FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/432650"
},
{
"name": "VDB-432650 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/432650/cti"
},
{
"name": "CVE-2026-124330 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-124330"
},
{
"name": "Submit #1027417 | FlowCI flow-core-x v1.23.01 Path Traversal",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1027417"
},
{
"tags": [
"exploit"
],
"url": "https://glacier-tarsal-711.notion.site/Flow-ci-Path-Traversal-in-flow-ci-LocalFileManager-via-Unsanitized-fileName-Parameter-3f7b25e24b368031bf2cc0afd9166896"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-07T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-07T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-07T20:40:43.000Z",
"value": "VulDB entry last update"
}
],
"title": "FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-124330",
"datePublished": "2026-11-08T12:15:07.142Z",
"dateReserved": "2026-11-07T19:35:25.672Z",
"dateUpdated": "2026-11-09T14:30:47.835Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-124329 (GCVE-0-2026-124329)
Vulnerability from cvelistv5 – Published: 2026-11-08 12:00 – Updated: 2026-11-08 12:00
VLAI
EPSS
VEX
Title
FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal
Summary
A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper.unzip of the file common/src/main/java/com/flowci/common/helper/FileHelper.java. The manipulation results in path traversal. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
CWE
- CWE-22 - Path Traversal
Assigner
VulDB
CNA
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/432649 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/432649/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-124329 | third-party-advisory |
| https://vuldb.com/submit/1027414 | third-party-advisory |
| https://glacier-tarsal-711.notion.site/Flow-ci-Zi… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FlowCI | flow-core-x |
Affected:
1.23.0
Affected: 1.23.1 Affected: 1.23.2 Affected: 1.23.3 Affected: 1.23.4 Affected: 1.23.5 Affected: 1.23.6 Affected: 1.23.7 Affected: 1.23.8 Affected: 1.23.9 Affected: 1.23.10 Affected: 1.23.11 Affected: 1.23.12 Affected: 1.23.13 Affected: 1.23.14 Affected: 1.23.15 Affected: 1.23.16 Affected: 1.23.17 Affected: 1.23.18 Affected: 1.23.19 Affected: 1.23.20 Affected: 1.23.21 Affected: 1.23.22 Affected: 1.23.23 Affected: 1.23.24 Affected: 1.23.25 Affected: 1.23.26 Affected: 1.23.27 Affected: 1.23.28 Affected: 1.23.29 Affected: 1.23.30 Affected: 1.23.31 Affected: 1.23.32 Affected: 1.23.33 Affected: 1.23.34 Affected: 1.23.35 Affected: 1.23.36 Affected: 1.23.37 Affected: 1.23.38 Affected: 1.23.39 Affected: 1.23.40 Affected: 1.23.41 Affected: 1.23.42 Affected: 1.23.43 Affected: 1.23.44 Affected: 1.23.45 Affected: 1.23.46 Affected: 1.23.47 Affected: 1.23.48 Affected: 1.23.49 cpe:2.3:a:flowci:flow-core-x:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:flowci:flow-core-x:*:*:*:*:*:*:*:*"
],
"product": "flow-core-x",
"vendor": "FlowCI",
"versions": [
{
"status": "affected",
"version": "1.23.0"
},
{
"status": "affected",
"version": "1.23.1"
},
{
"status": "affected",
"version": "1.23.2"
},
{
"status": "affected",
"version": "1.23.3"
},
{
"status": "affected",
"version": "1.23.4"
},
{
"status": "affected",
"version": "1.23.5"
},
{
"status": "affected",
"version": "1.23.6"
},
{
"status": "affected",
"version": "1.23.7"
},
{
"status": "affected",
"version": "1.23.8"
},
{
"status": "affected",
"version": "1.23.9"
},
{
"status": "affected",
"version": "1.23.10"
},
{
"status": "affected",
"version": "1.23.11"
},
{
"status": "affected",
"version": "1.23.12"
},
{
"status": "affected",
"version": "1.23.13"
},
{
"status": "affected",
"version": "1.23.14"
},
{
"status": "affected",
"version": "1.23.15"
},
{
"status": "affected",
"version": "1.23.16"
},
{
"status": "affected",
"version": "1.23.17"
},
{
"status": "affected",
"version": "1.23.18"
},
{
"status": "affected",
"version": "1.23.19"
},
{
"status": "affected",
"version": "1.23.20"
},
{
"status": "affected",
"version": "1.23.21"
},
{
"status": "affected",
"version": "1.23.22"
},
{
"status": "affected",
"version": "1.23.23"
},
{
"status": "affected",
"version": "1.23.24"
},
{
"status": "affected",
"version": "1.23.25"
},
{
"status": "affected",
"version": "1.23.26"
},
{
"status": "affected",
"version": "1.23.27"
},
{
"status": "affected",
"version": "1.23.28"
},
{
"status": "affected",
"version": "1.23.29"
},
{
"status": "affected",
"version": "1.23.30"
},
{
"status": "affected",
"version": "1.23.31"
},
{
"status": "affected",
"version": "1.23.32"
},
{
"status": "affected",
"version": "1.23.33"
},
{
"status": "affected",
"version": "1.23.34"
},
{
"status": "affected",
"version": "1.23.35"
},
{
"status": "affected",
"version": "1.23.36"
},
{
"status": "affected",
"version": "1.23.37"
},
{
"status": "affected",
"version": "1.23.38"
},
{
"status": "affected",
"version": "1.23.39"
},
{
"status": "affected",
"version": "1.23.40"
},
{
"status": "affected",
"version": "1.23.41"
},
{
"status": "affected",
"version": "1.23.42"
},
{
"status": "affected",
"version": "1.23.43"
},
{
"status": "affected",
"version": "1.23.44"
},
{
"status": "affected",
"version": "1.23.45"
},
{
"status": "affected",
"version": "1.23.46"
},
{
"status": "affected",
"version": "1.23.47"
},
{
"status": "affected",
"version": "1.23.48"
},
{
"status": "affected",
"version": "1.23.49"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Zy0t1 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper.unzip of the file common/src/main/java/com/flowci/common/helper/FileHelper.java. The manipulation results in path traversal. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 2.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 4.6,
"vectorString": "AV:N/AC:H/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-08T12:00:20.659Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-432649 | FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/432649"
},
{
"name": "VDB-432649 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/432649/cti"
},
{
"name": "CVE-2026-124329 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-124329"
},
{
"name": "Submit #1027414 | FlowCI flow-core-x v1.23.01 zipslip path traversal",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1027414"
},
{
"tags": [
"exploit"
],
"url": "https://glacier-tarsal-711.notion.site/Flow-ci-ZipSlip-Path-Traversal-in-flow-ci-FileHelper-unzip-During-Job-Report-Extraction-3f7b25e24b3680a8b7cec8c15d79a2fb"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-07T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-07T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-07T20:40:39.000Z",
"value": "VulDB entry last update"
}
],
"title": "FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-124329",
"datePublished": "2026-11-08T12:00:20.659Z",
"dateReserved": "2026-11-07T19:35:21.895Z",
"dateUpdated": "2026-11-08T12:00:20.659Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-124328 (GCVE-0-2026-124328)
Vulnerability from cvelistv5 – Published: 2026-11-08 11:00 – Updated: 2026-11-08 11:00
VLAI
EPSS
VEX
Title
FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection
Summary
A vulnerability has been found in FlowCI flow-core-x up to 1.23.49. The affected element is the function ConditionManagerImpl.run of the file core/src/main/java/com/flowci/core/common/manager/ConditionManagerImpl.java of the component Groovy Script Evaluation. The manipulation of the argument condition leads to code injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
Assigner
VulDB
CNA
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/432648 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/432648/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-124328 | third-party-advisory |
| https://vuldb.com/submit/1027401 | third-party-advisory |
| https://glacier-tarsal-711.notion.site/Flow-ci-Un… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FlowCI | flow-core-x |
Affected:
1.23.0
Affected: 1.23.1 Affected: 1.23.2 Affected: 1.23.3 Affected: 1.23.4 Affected: 1.23.5 Affected: 1.23.6 Affected: 1.23.7 Affected: 1.23.8 Affected: 1.23.9 Affected: 1.23.10 Affected: 1.23.11 Affected: 1.23.12 Affected: 1.23.13 Affected: 1.23.14 Affected: 1.23.15 Affected: 1.23.16 Affected: 1.23.17 Affected: 1.23.18 Affected: 1.23.19 Affected: 1.23.20 Affected: 1.23.21 Affected: 1.23.22 Affected: 1.23.23 Affected: 1.23.24 Affected: 1.23.25 Affected: 1.23.26 Affected: 1.23.27 Affected: 1.23.28 Affected: 1.23.29 Affected: 1.23.30 Affected: 1.23.31 Affected: 1.23.32 Affected: 1.23.33 Affected: 1.23.34 Affected: 1.23.35 Affected: 1.23.36 Affected: 1.23.37 Affected: 1.23.38 Affected: 1.23.39 Affected: 1.23.40 Affected: 1.23.41 Affected: 1.23.42 Affected: 1.23.43 Affected: 1.23.44 Affected: 1.23.45 Affected: 1.23.46 Affected: 1.23.47 Affected: 1.23.48 Affected: 1.23.49 cpe:2.3:a:flowci:flow-core-x:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:flowci:flow-core-x:*:*:*:*:*:*:*:*"
],
"modules": [
"Groovy Script Evaluation"
],
"product": "flow-core-x",
"vendor": "FlowCI",
"versions": [
{
"status": "affected",
"version": "1.23.0"
},
{
"status": "affected",
"version": "1.23.1"
},
{
"status": "affected",
"version": "1.23.2"
},
{
"status": "affected",
"version": "1.23.3"
},
{
"status": "affected",
"version": "1.23.4"
},
{
"status": "affected",
"version": "1.23.5"
},
{
"status": "affected",
"version": "1.23.6"
},
{
"status": "affected",
"version": "1.23.7"
},
{
"status": "affected",
"version": "1.23.8"
},
{
"status": "affected",
"version": "1.23.9"
},
{
"status": "affected",
"version": "1.23.10"
},
{
"status": "affected",
"version": "1.23.11"
},
{
"status": "affected",
"version": "1.23.12"
},
{
"status": "affected",
"version": "1.23.13"
},
{
"status": "affected",
"version": "1.23.14"
},
{
"status": "affected",
"version": "1.23.15"
},
{
"status": "affected",
"version": "1.23.16"
},
{
"status": "affected",
"version": "1.23.17"
},
{
"status": "affected",
"version": "1.23.18"
},
{
"status": "affected",
"version": "1.23.19"
},
{
"status": "affected",
"version": "1.23.20"
},
{
"status": "affected",
"version": "1.23.21"
},
{
"status": "affected",
"version": "1.23.22"
},
{
"status": "affected",
"version": "1.23.23"
},
{
"status": "affected",
"version": "1.23.24"
},
{
"status": "affected",
"version": "1.23.25"
},
{
"status": "affected",
"version": "1.23.26"
},
{
"status": "affected",
"version": "1.23.27"
},
{
"status": "affected",
"version": "1.23.28"
},
{
"status": "affected",
"version": "1.23.29"
},
{
"status": "affected",
"version": "1.23.30"
},
{
"status": "affected",
"version": "1.23.31"
},
{
"status": "affected",
"version": "1.23.32"
},
{
"status": "affected",
"version": "1.23.33"
},
{
"status": "affected",
"version": "1.23.34"
},
{
"status": "affected",
"version": "1.23.35"
},
{
"status": "affected",
"version": "1.23.36"
},
{
"status": "affected",
"version": "1.23.37"
},
{
"status": "affected",
"version": "1.23.38"
},
{
"status": "affected",
"version": "1.23.39"
},
{
"status": "affected",
"version": "1.23.40"
},
{
"status": "affected",
"version": "1.23.41"
},
{
"status": "affected",
"version": "1.23.42"
},
{
"status": "affected",
"version": "1.23.43"
},
{
"status": "affected",
"version": "1.23.44"
},
{
"status": "affected",
"version": "1.23.45"
},
{
"status": "affected",
"version": "1.23.46"
},
{
"status": "affected",
"version": "1.23.47"
},
{
"status": "affected",
"version": "1.23.48"
},
{
"status": "affected",
"version": "1.23.49"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "Zy0t1 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in FlowCI flow-core-x up to 1.23.49. The affected element is the function ConditionManagerImpl.run of the file core/src/main/java/com/flowci/core/common/manager/ConditionManagerImpl.java of the component Groovy Script Evaluation. The manipulation of the argument condition leads to code injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Code Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-74",
"description": "Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-08T11:00:22.602Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-432648 | FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/432648"
},
{
"name": "VDB-432648 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/432648/cti"
},
{
"name": "CVE-2026-124328 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-124328"
},
{
"name": "Submit #1027401 | FlowCI flow-core-x v1.23.01 remote code execution",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/1027401"
},
{
"tags": [
"exploit"
],
"url": "https://glacier-tarsal-711.notion.site/Flow-ci-Unrestricted-GroovyShell-Remote-Code-Execution-in-flow-ci-CI-Condition-Evaluation-3f7b25e24b368091a9c8d7bbf28fa5bd"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-07T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-07T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-07T20:40:34.000Z",
"value": "VulDB entry last update"
}
],
"title": "FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-124328",
"datePublished": "2026-11-08T11:00:22.602Z",
"dateReserved": "2026-11-07T19:35:17.713Z",
"dateUpdated": "2026-11-08T11:00:22.602Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-4215 (GCVE-0-2026-4215)
Vulnerability from cvelistv5 – Published: 2026-03-16 04:32 – Updated: 2026-03-16 18:46
VLAI
EPSS
VEX
Title
FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery
Summary
A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of the file core/src/main/java/com/flowci/core/config/service/ConfigServiceImpl.java of the component SMTP Host Handler. The manipulation results in server-side request forgery. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-03-16 18:45 UTC
CWE
- CWE-918 - Server-Side Request Forgery
Assigner
VulDB
CNA
References
4 references
| URL | Tags |
|---|---|
| https://vuldb.com/?id.351139 | vdb-entrytechnical-description |
| https://vuldb.com/?ctiid.351139 | signaturepermissions-required |
| https://vuldb.com/?submit.770491 | third-party-advisory |
| https://github.com/fakebug111/my_public_bug/blob/… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| FlowCI | flow-core-x |
Affected:
1.23.01
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-4215",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-16T18:45:57.657844Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-16T18:46:08.066Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"modules": [
"SMTP Host Handler"
],
"product": "flow-core-x",
"vendor": "FlowCI",
"versions": [
{
"status": "affected",
"version": "1.23.01"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "fakebug (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01. The impacted element is the function Save of the file core/src/main/java/com/flowci/core/config/service/ConfigServiceImpl.java of the component SMTP Host Handler. The manipulation results in server-side request forgery. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.5,
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "Server-Side Request Forgery",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-16T04:32:12.679Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-351139 | FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/?id.351139"
},
{
"name": "VDB-351139 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/?ctiid.351139"
},
{
"name": "Submit #770491 | flow flow-core-x 1.23.01 Server-Side Request Forgery",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/?submit.770491"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/fakebug111/my_public_bug/blob/main/issus01.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-15T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-03-15T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-03-15T16:10:26.000Z",
"value": "VulDB entry last update"
}
],
"title": "FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-4215",
"datePublished": "2026-03-16T04:32:12.679Z",
"dateReserved": "2026-03-15T15:05:22.159Z",
"dateUpdated": "2026-03-16T18:46:08.066Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}