CVE-2025-67278

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before version v.9.1.2 allows a remote attacker to escalate privileges by sending a crafted HTTP request . This vulnerability is classified as an incorrect privilege assignment (CWE-266). To mitigate this risk, it is recommended to update to ...