VYPR
← All advisories
Medium severity5.1NVD Advisory· Published Feb 15, 2024· Updated Jun 17, 2026

CVE-2023-46596

CVE-2023-46596

Description

Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60 permits an attacker to initiate an XSS attack by injecting malicious executable scripts into the application's code. Fixed in version A32.20 (b600 and above), A32.50 (b430 and above), A32.60 (b250 and above)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Manageengine/Fireflow3 versions
    cpe:2.3:a:algosec:fireflow:a32.20:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:algosec:fireflow:a32.20:*:*:*:*:*:*:*
    • cpe:2.3:a:algosec:fireflow:a32.50:*:*:*:*:*:*:*
    • cpe:2.3:a:algosec:fireflow:a32.60:*:*:*:*:*:*:*
  • Manageengine/FireFlow VisualFlowllm-create
    Range: A32.20 (b600 and above), A32.50 (b430 and above), A32.60 (b250 and above)
  • Algosec/Algosec FireFlowv5
    Range: A32.20, A32.50, A32.60

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.