CVE-2020-26175

In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of other users.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:tangro:business_workflow:*:*:*:*:*:*:*:*

Information

Published : 2020-12-18 02:15

Updated : 2021-07-21 04:39


NVD link : CVE-2020-26175

Mitre link : CVE-2020-26175


JSON object : View

CWE
CWE-639

Authorization Bypass Through User-Controlled Key

Advertisement

dedicated server usa

Products Affected

tangro

  • business_workflow