Skip to content

Commit 8cd32c0

Browse files
Update modules/exploits/multi/http/flowise_js_rce.rb
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
1 parent db08295 commit 8cd32c0

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

modules/exploits/multi/http/flowise_js_rce.rb

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -103,9 +103,7 @@ def execute_command(cmd, _opts = {})
103103
if datastore['FLOWISE_EMAIL'].blank? || datastore['FLOWISE_PASSWORD'].blank?
104104
fail_with(Failure::NoAccess, 'Authentication required - set FLOWISE_EMAIL and FLOWISE_PASSWORD')
105105
end
106-
unless flowise_login(datastore['FLOWISE_EMAIL'], datastore['FLOWISE_PASSWORD'])
107-
fail_with(Failure::NoAccess, 'Authentication required for this version but login failed')
108-
end
106+
fail_with(Failure::NoAccess, 'Authentication required for this version but login failed') unless flowise_login(datastore['FLOWISE_EMAIL'], datastore['FLOWISE_PASSWORD'])
109107
elsif !datastore['FLOWISE_EMAIL'].blank? && !datastore['FLOWISE_PASSWORD'].blank?
110108
flowise_login(datastore['FLOWISE_EMAIL'], datastore['FLOWISE_PASSWORD']) ||
111109
vprint_warning('Login failed, but continuing without authentication (may work for versions < 3.0.1)')

0 commit comments

Comments
 (0)