ГлавнаяУязвимости → CVE-2025-3709
9.8критическая

CVE-2025-3709

Описание

Agentflow from Flowring Technology has an Account Lockout Bypass vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform password brute force attack.

Затрагиваемое ПО
Flowring Agentflow
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://www.twcert.org.tw/en/cp-139-10090-112f7-2.htmlhttps://www.twcert.org.tw/tw/cp-132-10091-12462-1.html