Description
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
Medium · 5.3
CVE-2020-26178
EUVD-2020-18803GHSA-hjx4-ghxm-xpj2
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenti…
Published Dec 18, 2020 · Updated Aug 4, 2024 · Assigned by mitre