CVE-2023-37288

CVE-2023-37288 concerns the SmartBPM.NET component, where a path traversal flaw in the file download function can allow an unauthenticated remote attacker to access arbitrary system files. The description consistently references path traversal in SmartBPM.NET; connected records confirm the issue ...

CVE-2023-37286 SmartBPM.NET - Use of Hard-Coded Credentials - 1

SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service...

SmartSoft SmartBPM.NET 信任管理问题漏洞

SmartSoft SmartBPM.NET is an enterprise process management platform from China-based SmartSoft. A vulnerability in SmartSoft SmartBPM.NET exists due to a trust management issue that arises from the use of hard-coded machine keys...