JEHC-BPM 安全漏洞

JEHC-BPM is a BPM open source platform for jehc individual developers. A security vulnerability exists in JEHC-BPM v2.0.1, which originates from an arbitrary file upload in the /server/executeExec component and could lead to arbitrary code execution...

CVE-2025-45854: Missing Authorization

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...