CVE-2023-46595

Summary

CVE-2023-46595 is a vulnerability affecting the FireFlow VisualFlow workflow editor. An attacker can exploit this HTML injection flaw to trigger a Net-NTLM leak, exposing the victim's domain credentials and Net-NTLM hash. This vulnerability can potentially be used for relay domain attacks. The issue has been resolved in FireFlow versions A32.20 (b570 or above) and A32.50 (b390 or above).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.