CVE-2024-8182: 
JavaScript vulnerability analysis and mitigation

An Unauthenticated Denial of Service (DoS) vulnerability was discovered in Flowise version 1.8.2, identified as CVE-2024-8182. The vulnerability affects the "/api/v1/get-upload-file" API endpoint due to improper handling of user-supplied input, which can lead to a complete crash of the instance running a vulnerable version (Tenable Advisory).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating that it is network-accessible, requires low attack complexity, and needs no privileges or user interaction to exploit (NVD).

When successfully exploited, this vulnerability can cause a complete crash of the Flowise instance running the vulnerable version, resulting in a denial of service condition that affects system availability (Tenable Advisory).

At the time of the advisory publication, Flowise maintainers have not provided a solution for this issue. The vulnerability was disclosed following multiple attempts to contact the vendor between June and August 2024 (Tenable Advisory).