CNNVD-202602-1659 Information
Feb 10, 2026
cve
CNNVD ID
CNNVD-202602-1659
Related CVE
- CNNVD Published: 2026-02-10
Description (Chinese)
Flowring Agentflow是中国华苓（Flowring）公司的一个智能流程自动化(RPA)平台。 Flowring AgentFlow存在跨站脚本漏洞，该漏洞源于存储型跨站脚本，可能导致经过身份验证的远程攻击者注入持久性JavaScript代码，并在页面加载时在用户浏览器中执行。
Description (English)
Flowring Agentflow is an intelligent process automation (RPA) platform for Flowring China. Flowring AgentFlow has a cross-site script loophole, which originates in a storage-type cross-site script, which may result in an identified remote attacker injecting the persistent JavaScript code and executing it in a user browser when the page is loaded.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
华苓
Published
2026-02-10
Last Modified
2026-02-24
References
https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html https://www.twcert.org.tw/tw/cp-132-10699-49c0b-1.html
Patch
https://www.flowring.com/agentflow/
Share on: