CVE-2024-9277

Description

A vulnerability classified as problematic was found in Langflow up to 1.0.18. Affected by this vulnerability is an unknown functionality of the file srcackendaselangflowinterfaceutils.py of the component HTTP POST Request Handler. The manipulation of the argument remaining_text leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Information

Base Score

3.5

MODERATE

Vector

CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS Score

Exploitation Probability

0.17

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2024-48061,CVE-2024-9277 are affected in Python-langflow 1.0.18	Windows
Vulnerabilities CVE-2024-48061,CVE-2024-9277 are affected in Langflow 1.0.18	Windows
Vulnerabilities CVE-2024-48061,CVE-2024-9277 are affected in Python-langflow for linux 1.0.18	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234