bonitasoft Vulnerabilities and Affected Products
Vulnerabilities associated with bonita_bpm_portal.
Products
Clear product- bonita_web3 vulnerabilities
- bonita-connector-webservice1 vulnerability
- bonita_bpm_portal1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
bonitasoft bonita_bpm_portal Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the theme parameter and a file path in the location parameter to bonita/portal/themeResource. | CVSS5.0v2.0 | EPSS17.7% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |