18 December 2020

8 results · Clear filters · Feed

• Medium 4.7
  CVE-2020-26251

  CORS configuration is possibly vulnerable

  Open Zaak is a modern, open-source data- and services-layer to enable zaakgericht werken, a Dutch approach to case management. In Open Zaak before version 1.3.3 the Cross-Origin-Resource-Sharing policy in Open Zaak is currently wide open - every client is all…

  open-zaak open-zaak
  Dec 18, 2020
• Medium 4.3
  CVE-2020-4764

  IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicio…

  IBM Planning Analytics
  Dec 18, 2020
• Medium 4.3
  CVE-2020-26171

  In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can…

  Dec 18, 2020
• Medium 4.2
  CVE-2020-26172

  Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse t…

  Dec 18, 2020
• Medium 6.5
  CVE-2020-26175

  In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile i…

  Dec 18, 2020
• Medium 4.3
  CVE-2020-26176

  An issue was discovered in tangro Business Workflow before 1.18.1. No (or broken) access control checks exist on the /a…

  Dec 18, 2020
• Medium 4.3
  CVE-2020-26177

  In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not in…

  Dec 18, 2020
• Medium 5.3
  CVE-2020-26178

  In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments wi…

  Dec 18, 2020