Flowring Technology Agentflow BPM 路径遍历漏洞

Flowring Technology Agentflow BPM is an enterprise process management system from Flowring Technology, a Chinese company. A path traversal vulnerability exists in Flowring Technology Agentflow BPM, which arises from a file download feature that allows an unauthenticated, remote attacker to bypass...

PT-2022-24692 · Unknown · Agentflow Bpm

Name of the Vulnerable Software and Affected Versions: Agentflow BPM enterprise management system affected versions not specified Description: The issue is related to improper authentication in the Agentflow BPM enterprise management system. A remote attacker with general user privilege can explo...

PT-2022-24690 · Unknown · Agentflow Bpm

Name of the Vulnerable Software and Affected Versions: Agentflow BPM affected versions not specified Description: The file upload function has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this to upload arbitrary files and execute arbitrary...