The vulnerability of the BPM platform’s module for comprehensive process automation by ELMA365 allows a attacker to perform an SSRF attack.

The vulnerability of the BPM platform for comprehensive process automation in ELMA365 is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack remotely...