CVE-2026-124329
LOW
INFO
Priority: 0.01
BB Relevance:
55/100
Published: 2026-11-08
Modified: 2026-11-10
First seen: 2026-11-08
Status: active
Attack Surface
Network
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
Low
UI:
None
AT:
None
VC:
Low
VI:
Low
VA:
Low
Description
A vulnerability was found in FlowCI flow-core-x up to 1.23.49. The impacted element is the function FileHelper.unzip of the file common/src/main/java/com/flowci/common/helper/FileHelper.java. The manipulation results in path traversal. The attack may be performed from remote. A high complexity level is associated with this attack. The exploitability is regarded as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Weakness Classification (1)
Affected Software (100)
| Vendor | Product | Version |
|---|---|---|
| FlowCI | flow-core-x | 1.23.0 |
| FlowCI | flow-core-x | 1.23.1 |
| FlowCI | flow-core-x | 1.23.2 |
| FlowCI | flow-core-x | 1.23.3 |
| FlowCI | flow-core-x | 1.23.4 |
| FlowCI | flow-core-x | 1.23.5 |
| FlowCI | flow-core-x | 1.23.6 |
| FlowCI | flow-core-x | 1.23.7 |
| FlowCI | flow-core-x | 1.23.8 |
| FlowCI | flow-core-x | 1.23.9 |
| FlowCI | flow-core-x | 1.23.10 |
| FlowCI | flow-core-x | 1.23.11 |
| FlowCI | flow-core-x | 1.23.12 |
| FlowCI | flow-core-x | 1.23.13 |
| FlowCI | flow-core-x | 1.23.14 |
| FlowCI | flow-core-x | 1.23.15 |
| FlowCI | flow-core-x | 1.23.16 |
| FlowCI | flow-core-x | 1.23.17 |
| FlowCI | flow-core-x | 1.23.18 |
| FlowCI | flow-core-x | 1.23.19 |
| FlowCI | flow-core-x | 1.23.20 |
| FlowCI | flow-core-x | 1.23.21 |
| FlowCI | flow-core-x | 1.23.22 |
| FlowCI | flow-core-x | 1.23.23 |
| FlowCI | flow-core-x | 1.23.24 |
| FlowCI | flow-core-x | 1.23.25 |
| FlowCI | flow-core-x | 1.23.26 |
| FlowCI | flow-core-x | 1.23.27 |
| FlowCI | flow-core-x | 1.23.28 |
| FlowCI | flow-core-x | 1.23.29 |
Showing 30 of 100 entries