Appflowy Cloud
Monthly
SQL injection in AppFlowy Cloud's qcuiknote feature enables authenticated users to exfiltrate arbitrary data from the underlying database. Affecting all tracked versions of cpe:2.3:a:appflowy-io:appflowy-cloud, this vulnerability carries a CVSS 4.0 score of 7.1 driven by high confidentiality impact and network reachability at low complexity. A proof-of-concept exploit is publicly available from Project Black (PRJBLK), materially elevating real-world risk; no vendor-released patch has been identified at time of analysis.
SQL injection in AppFlowy Cloud's qcuiknote feature enables authenticated users to exfiltrate arbitrary data from the underlying database. Affecting all tracked versions of cpe:2.3:a:appflowy-io:appflowy-cloud, this vulnerability carries a CVSS 4.0 score of 7.1 driven by high confidentiality impact and network reachability at low complexity. A proof-of-concept exploit is publicly available from Project Black (PRJBLK), materially elevating real-world risk; no vendor-released patch has been identified at time of analysis.