Insecure Direct Object Reference (IDOR)

org.bonitasoft.engine, bonita-server is vulnerable to Insecure Direct Object Reference IDOR. The vulnerability is due to the absence of dynamic permissions, which previously existed only in the Subscription edition and were not customizable in the Community edition...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.0), org.bonitasoft.engine:bonita-engine-standalone (7.9.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.1), org.bonitasoft.engine:bonita-engine-standalone (7.9.1) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.1)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.2), org.bonitasoft.engine:bonita-engine-standalone (7.9.2) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.2)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.2 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.3), org.bonitasoft.engine:bonita-engine-standalone (7.9.3) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.3)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.4), org.bonitasoft.engine:bonita-engine-standalone (7.9.4) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.4)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.4 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.9.5), org.bonitasoft.engine:bonita-engine-standalone (7.9.5) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.9.5)

org.bonitasoft.engine:bonita-server MAVEN version 7.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.9.5 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.0), org.bonitasoft.engine:bonita-engine-standalone (7.10.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.10.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.3), org.bonitasoft.engine:bonita-engine-standalone (7.10.3) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.10.3)

org.bonitasoft.engine:bonita-server MAVEN version 7.10.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.4), org.bonitasoft.engine:bonita-engine-standalone (7.10.4) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.10.4)

org.bonitasoft.engine:bonita-server MAVEN version 7.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.4 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.5), org.bonitasoft.engine:bonita-engine-standalone (7.10.5) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.10.5)

org.bonitasoft.engine:bonita-server MAVEN version 7.10.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.5 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.10.6), org.bonitasoft.engine:bonita-engine-standalone (7.10.6) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.10.6)

org.bonitasoft.engine:bonita-server MAVEN version 7.10.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.10.6 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.0), org.bonitasoft.engine:bonita-engine-standalone (7.11.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.0 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.2), org.bonitasoft.engine:bonita-engine-standalone (7.11.2) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.2)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.2 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.3), org.bonitasoft.engine:bonita-engine-standalone (7.11.3) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.3)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.3 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.11.4), org.bonitasoft.engine:bonita-engine-standalone (7.11.4) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.11.4)

org.bonitasoft.engine:bonita-server MAVEN version 7.11.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.11.4 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.12.1), org.bonitasoft.engine:bonita-engine-standalone (7.12.1) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.12.1)

org.bonitasoft.engine:bonita-server MAVEN version 7.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.12.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.13.0), org.bonitasoft.engine:bonita-engine-standalone (7.13.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.13.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.13.0 -...

org.bonitasoft.connectors:bonita-connector-rest (>=1.4.0, <=1.5.1), org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.14.0) +1 more potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.14.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.connectors:bonita-connector-rest =1.4.0, =1.5.1 -...

org.bonitasoft.engine:bonita-engine-spring-boot-starter (7.15.0), org.bonitasoft.engine:bonita-engine-standalone (7.15.0) potentially affected by CVE-2024-28087 via org.bonitasoft.engine:bonita-server (7.15.0)

org.bonitasoft.engine:bonita-server MAVEN version 7.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.bonitasoft.engine:bonita-server and may be impacted: - org.bonitasoft.engine:bonita-engine-spring-boot-starter 7.15.0 -...