All 4 CVE vulnerabilities found in flow-core-x, with AI-generated Chinese analysis, references, and POCs.
Vendor: FlowCI
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-124330 | FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal CWE-22 | 5.0 | Medium | 2026-11-08 |
| CVE-2026-124329 | FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal CWE-22 | 5.0 | Medium | 2026-11-08 |
| CVE-2026-124328 | FlowCI flow-core-x Groovy Script Evaluation ConditionManagerImpl.java ConditionManagerImpl.run code injection CWE-94 | 7.4 | High | 2026-11-08 |
| CVE-2026-4215 | FlowCI flow-core-x SMTP Host ConfigServiceImpl.java save server-side request forgery CWE-918 | 6.3 | Medium | 2026-03-16 |
All 4 known CVE vulnerabilities affecting flow-core-x with full Chinese analysis, references, and POCs where available.