PT-2020-16326

Name of the Vulnerable Software and Affected Versions tangro Business Workflow versions prior to 1.18.1 Description The issue allows users to manipulate the documentId of attachment uploads to the "/api/document/attachments/upload" API endpoint. This manipulation enables users to add attachments ...