Executive Summary

This vulnerability is a stored Cross-Site Scripting (XSS) issue in Flowise before version 3.0.5. It occurs because the chat log allows HTML tags like <form> and <input>, enabling an attacker to inject malicious HTML code into the logs via crafted prompts. When an admin views the chat log and interacts with the injected content (such as clicking an image input), malicious JavaScript can execute, potentially stealing sensitive information like stored passwords. [1]

Useful 0 Not Useful 0

Impact Analysis

Exploiting this vulnerability can allow an attacker to hijack an admin account in the chatbot application, gaining unauthorized access to sensitive chat logs and API keys. The attack requires the admin to click on the injected malicious content, leading to credential theft or other malicious actions. While no privileges are needed to perform the attack, it has high confidentiality impact but does not affect integrity or availability. [1]

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by inspecting the chat logs for injected HTML form and input elements, specifically looking for suspicious <form> and <input type="image"> tags with a formaction attribute containing JavaScript code. Since the attack requires an admin to view the chat log, reviewing logs for such injected HTML is key. There are no specific commands provided, but you can use text search tools like grep to scan log files for patterns such as '<form>' or 'formaction="javascript:' to identify potential exploit attempts. [1]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting admin access to the chat logs to trusted users only, educating admins not to click on suspicious images or forms within chat logs, and monitoring for unusual activity. Since no patched versions are available yet, consider implementing input sanitization or filtering to block HTML tags like <form> and <input> in chat logs. Additionally, applying network-level protections such as web application firewalls (WAF) to detect and block malicious payloads may help reduce risk. [1]

Useful 0 Not Useful 0