Skip to content
OpenAdvisories

Vendor

valtimo-platform

6 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.6

    Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer

    Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls made via Spring's RestClient and logs the full request body,…

  • High 8.3

    Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users

    Valtimo is a platform for Business Process Automation. In versions starting from 11.0.0.RELEASE to 11.3.3.RELEASE and 12.0.0.RELEASE to 12.12.0.RELEASE, all objects for which an object-management configuration exists can be listed, viewed, edited, created or …