44 matches found
entfrm-bpmn (>=8.6.2, <=8.6.6), entfrm-flowable-designer (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2021-23460 via min-dash (3.5.2)
min-dash NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on min-dash and may be impacted: - entfrm-bpmn =8.6.2, =1.0.0, =2.2.0, =1.0.0, =1.1.3 Source cves: CVE-2021-23460 Source advisory: SNYK:JS-MINDASH-2340605...
CVE-2021-20306
A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality...
Design/Logic Flaw
A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality...
CVE-2021-20306
A flaw was found in the BPMN editor in version jBPM 7.51.0.Final. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality...
CVE-2021-20306
CVE-2021-20306 affects the jBPM BPMN editor (version 7.51.0.Final). The vulnerability allows any authenticated user from any project to see the names of Ruleflow Groups in other projects, exposing project confidentiality. The issue is rooted in cross-project visibility within the BPMN editor; no ...
PT-2021-13880 · Jbpm · Jbpm
Name of the Vulnerable Software and Affected Versions: jBPM version 7.51.0.Final Description: A flaw in the BPMN editor allows any authenticated user to see the names of Ruleflow Groups from other projects, despite not having access to those projects. This poses a threat to confidentiality...
CVE-2021-20306
A flaw was found in the BPMN editor. Any authenticated user from any project can see the name of Ruleflow Groups from other projects, despite the user not having access to those projects. The highest threat from this vulnerability is to confidentiality...
Red Hat BPMN Editor 安全漏洞
Red Hat BPMN Editor is an application software from Red Hat, Inc. an editor software. A security vulnerability exists in Red Hat BPMN EditorThe vulnerability allows any authenticated user in any project to see the names of Ruleflow groups in other projects, even though the user does not have acce...
WSO2 Enterprise Integrator Cross-Site Scripting Vulnerability
WSO2 Enterprise Integrator EI is a comprehensive integration solution that supports communication between a variety of different applications. A stored cross-site scripting vulnerability exists in the BPMN Explorer in WSO2 Enterprise Integrator 6.6.0 and earlier versions. No detailed vulnerabilit...
CVE-2020-25516
WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...
CVE-2020-25516
WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...
Cross site scripting
WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...
CVE-2020-25516
CVE-2020-25516 affects WSO2 Enterprise Integrator 6.6.0 and earlier, with a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks. The linked CVE entries confirm the issue and describe the affected product (WSO2 EI), the vulnerable component (BPMN explorer tasks) and the root cau...
CVE-2020-25516
WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting XSS vulnerability in BPMN explorer tasks...
@quarks/bpmn-extension (>=1.0.0, <=1.0.142) potentially affected by unknown CVE via cmmn-js-properties-panel (0.4.0)
cmmn-js-properties-panel NPM version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cmmn-js-properties-panel and may be impacted: - @quarks/bpmn-extension =1.0.0, =1.0.142 Source cves: unknown CVE Source advisory: OSV:GHSA-VMH4-322V-CFPC...
Cross-Site Scripting in bpmn-js-properties-panel
Versions of bpmn-js-properties-panel prior to 0.31.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. Recommendation Upgrade to version 0.31.0 or lat...
@dotgov/bpmn (>=0.0.1, <=0.0.29), @dotgov/z_bpmn (>=0.0.1, <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2, <=0.30.0)
bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...
GHSA-VPJ4-89Q8-RH38 Cross-Site Scripting in bpmn-js-properties-panel
Versions of bpmn-js-properties-panel prior to 0.31.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. Recommendation Upgrade to version 0.31.0 or lat...
Cross-Site Scripting
Overview Versions of bpmn-js-properties-panel prior to 0.31.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize input in specially configured diagrams, which may allow attackers to inject arbitrary JavaScript in the embedding website. Recommendation Upgrade to version 0.31...
