Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Bonitasoft Subscribe
Filtered by product Bonita Web
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-25237 1 Bonitasoft 1 Bonita Web 2022-06-09 7.5 HIGH 9.8 CRITICAL
Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /../i18ntranslation/ to the end of a URL, users with no privileges can access privileged API endpoints. This can lead to remote code execution by abusing the privileged API actions.