Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-5683 EUVD-2024-46856GHSA-4mv5-vqcp-r46r

Remote Code Execution in Next4Biz's BPM

Published Jun 24, 2024 · Updated Jun 3, 2026 · Assigned by TR-CERT

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Remote Code Inclusion.

This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.

Affected products

VendorProductAffectedFixed
Next4Biz CRM & BPM Software Business Process Manangement (BPM) 6.6.4.4 – < 6.6.4.5 6.6.4.5

References