Filtered by vendor Bonitasoft
Subscriptions
Filtered by product Bonita Web
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2024-26542 | 1 Bonitasoft | 1 Bonita Web | 2025-09-17 | 6.1 Medium |
| Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attackers to execute arbitrary code via a crafted payload to the Groups Display name field. | ||||
| CVE-2022-25237 | 1 Bonitasoft | 1 Bonita Web | 2024-11-21 | 9.8 Critical |
| Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /../i18ntranslation/ to the end of a URL, users with no privileges can access privileged API endpoints. This can lead to remote code execution by abusing the privileged API actions. | ||||
Page 1 of 1.