Description
Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Data Systems Consulting | BPM | unspecified – ≤ 5.8.6.1 | — |