{"id":"EUVD-2025-32213","enisaUuid":"4c5b0984-6473-31b7-916c-7836532eec30","description":"Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log.","datePublished":"Oct 6, 2025, 12:00:00 AM","dateUpdated":"Oct 6, 2025, 1:54:31 PM","baseScore":8.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","references":"https://github.com/FlowiseAI/Flowise/pull/4905\nhttps://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.5\nhttps://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7r4h-vmj9-wg42\n","aliases":"CVE-2025-29192\nGHSA-7r4h-vmj9-wg42\nGHSA-wq95-wr7m-26h4\n","assigner":"mitre","epss":0.41,"enisaIdProduct":[{"id":"2d91a819-4617-3700-accb-1826b4e20891","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.0.5"}],"enisaIdVendor":[{"id":"d061b4a2-3dac-37c3-a3b9-4520519761ed","vendor":{"name":"FlowiseAI"}}],"enisaIdVulnerability":[{"id":"9823e18f-b4c4-389d-b2b1-df710a466f0a","vulnerability":{"id":"CVE-2025-29192","description":"Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log.","datePublished":"Oct 6, 2025, 12:00:00 AM","dateUpdated":"Oct 6, 2025, 1:54:31 PM","status":"PUBLISHED","baseScore":8.2,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N","references":"https://github.com/FlowiseAI/Flowise/pull/4905\nhttps://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.5\nhttps://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7r4h-vmj9-wg42\n","enisa_id":"EUVD-2025-32213\n","assigner":"mitre","epss":0.41,"dataProcessed":"Nov 2, 2026, 7:18:35 AM","vulnerabilityProduct":[{"id":"0f38542a-3e34-3d11-88b3-933a972e36c2","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.0.5"}],"vulnerabilityVendor":[{"id":"c5c080bb-8451-3ff5-be8a-ad872240fef0","vendor":{"name":"FlowiseAI"}}]}},{"id":"c327bf03-856a-30d1-8df9-af5c2b0f1aad","vulnerability":{"id":"GHSA-7r4h-vmj9-wg42","description":"Flowise Stored XSS vulnerability through logs in chatbot","datePublished":"Oct 3, 2025, 9:48:36 PM","dateUpdated":"Oct 13, 2025, 5:05:32 PM","baseScore":0.0,"references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7r4h-vmj9-wg42\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-29192\nhttps://github.com/FlowiseAI/Flowise/pull/4905\nhttps://github.com/FlowiseAI/Flowise/commit/9a06a85a8ddcbaeca1342827a5fea9087a587d97\nhttps://github.com/FlowiseAI/Flowise\nhttps://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.5\n","enisa_id":"EUVD-2025-32213\n","aliases":"GHSA-7r4h-vmj9-wg42\nCVE-2025-29192\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:55:38 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f5ae8c86-7ba5-3f8f-94d6-ce3f4ad3b4bb","vulnerability":{"id":"GHSA-wq95-wr7m-26h4","description":"Duplicate Advisory: Flowise Stored XSS vulnerability through logs in chatbot","datePublished":"Oct 6, 2025, 3:31:38 AM","dateUpdated":"Oct 8, 2025, 7:34:51 PM","baseScore":0.0,"references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-7r4h-vmj9-wg42\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-29192\nhttps://github.com/FlowiseAI/Flowise/pull/4905\nhttps://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.5\n","enisa_id":"EUVD-2025-32213\n","aliases":"GHSA-wq95-wr7m-26h4\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:55:38 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}