106 matches found
EUVD-2011-0683
Malware in sbrugna...
EUVD-2011-0693
Malware in sbrugna...
EUVD-2011-0690
Malware in sbrugna...
EUVD-2017-16455
Malware in sbrugna...
EUVD-2005-0551
Malware in sbrugna...
EUVD-2011-1250
Malware in sbrugna...
EUVD-2011-1245
Malware in sbrugna...
EUVD-2011-0685
Malware in sbrugna...
EUVD-2011-1246
Malware in sbrugna...
EUVD-2011-1248
Malware in sbrugna...
EUVD-2011-1249
Malware in sbrugna...
EUVD-2023-43646
Malicious code in bioql PyPI...
EUVD-2025-16916
Malicious code in bioql PyPI...
CVE-2025-48881
Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If...
CVE-2025-48881
Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If...
CVE-2025-48881
CVE-2025-48881 pertains to the valtimo-backend-libraries component. Vulnerable versions (11.0.0.RELEASE–11.3.3.RELEASE and 12.0.0.RELEASE–12.12.0.RELEASE) allow unauthorised users to list, view, edit, create or delete objects for which an object-management configuration exists; exposure of object...
CVE-2025-48881 Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users
Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or deleted by unauthorised users. If...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper access control mechanisms. A user can list, view, edit, create, or delete access and modify objects if at least one object-type is configured via object-management. Workaround This vulnerability c...
com.ritense.valtimo:portaaltaak (>=11.0.0.RELEASE <=11.3.3.RELEASE), com.ritense.valtimo:valtimo-gzac-dependencies (>=11.0.0.RELEASE <=11.3.3.RELEASE) +1 more potentially affected by CVE-2025-48881 via com.ritense.valtimo:object-management (>=11.0.0.RELEASE <=11.3.3.RELEASE)
com.ritense.valtimo:object-management MAVEN version =11.0.0.RELEASE, =11.0.0.RELEASE, =11.0.0.RELEASE, =11.0.0.RELEASE, =11.3.3.RELEASE Source cves: CVE-2025-48881 Source advisory: OSV:GHSA-965R-9CG9-G42P...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper access control mechanisms. A user can list, view, edit, create, or delete access and modify objects if at least one object-type is configured via object-management. Workaround This vulnerability c...