CVE-2026-42156

7.1 Élevée

Publiée le 13/05/2026 à 01:16 · Modifiée le 17/06/2026 à 12:47 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification. Prior to 1.2.3, a remote attacker can create a node with a malicious type that can escape an existing Cypher query and an adversary can execute an arbitrary Cypher query. This vulnerability is fixed in 1.2.3.

Traduire en français

Produits concernés

reconurge flowsint

Scores CVSS

Version	Score	Source	Vecteur
4.0	7.1 Élevée	security-advisories@github.com	`CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`

Faiblesses (CWE)

CWE-943

Références

https://github.com/reconurge/flowsint/security/advisories/GHSA-h5m2-c2c5-968p
https://github.com/reconurge/flowsint/security/advisories/GHSA-h5m2-c2c5-968p

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories