Lucene search
+L

5 matches found

VulnCheck KEV
VulnCheck KEV
added 2024/05/15 12:0 a.m.4 views

VulnCheck KEV: CVE-2022-25237

Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /../i18ntranslation/ to the end of a URL, users with no privileges can access privileged API...

9.8CVSS5.8AI score0.56222EPSS
SaveExploits1References1
Rows per page
Query Builder