EUVD-2020-18803

Malware in sbrugna...

CVE-2020-26178

In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated...

Code injection

In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated...

PT-2020-16333

Name of the Vulnerable Software and Affected Versions tangro Business Workflow versions prior to 1.18.1 Description The issue allows unauthorized access to download workitem attachments by knowing the attachment ID, without requiring authentication. Recommendations For versions prior to 1.18.1,...