VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Nov 2, 2023· Updated Jun 17, 2026

CVE-2023-46595

CVE-2023-46595

Description

Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor allows an attacker to obtain victim’s domain credentials and Net-NTLM hash which can lead to relay domain attacks. Fixed in A32.20 (b570 or above), A32.50 (b390 or above)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • FireFlow/VisualFlowllm-create
    Range: before A32.20 (b570) and before A32.50 (b390)
  • Algosec/Algosec FireFlowv5
    Range: A32.20, A32.50

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.