CNNVD-202602-1657 Information
Feb 10, 2026
cve
CNNVD ID
CNNVD-202602-1657
Related CVE
- CNNVD Published: 2026-02-10
Description (Chinese)
Flowring Agentflow是中国华苓（Flowring）公司的一个智能流程自动化(RPA)平台。 Flowring AgentFlow存在跨站脚本漏洞，该漏洞源于反射型跨站脚本，可能导致未经验证的远程攻击者通过钓鱼攻击在用户浏览器中执行任意JavaScript代码。
Description (English)
Flowring Agentflow is an intelligent process automation (RPA) platform for Flowring China. Flowing AgentFlow has a cross-site script loophole, which stems from a reflector-type cross-site script, which could lead to uncertified long-range attackers using fishing attacks to enforce any JavaScript code in a user browser.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
华苓
Published
2026-02-10
Last Modified
2026-02-24
References
https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html
Patch
https://www.flowring.com/agentflow/
Share on: