JEHC-BPM - Remote Code Execute Detection

A Remote Command Execution vulnerability in the component /server/executeExec of JEHC-BPM = v2.0.1 allows attackers to execute arbitrary code. The vulnerability exists due to insufficient authorization checks in the executeExec endpoint which allows direct command execution. !/usr/bin/env python3...

CVE-2025-45854: Missing Authorization

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams...

JEHC-BPM security vulnerabilities

JEHC-BPM is a BPM open source platform for jehc individual developers. A security vulnerability exists in JEHC-BPM v2.0.1, which originates from an arbitrary file upload in the /server/executeExec component and could lead to arbitrary code execution...