CVE-2020-26171

MEDIUM

tangro Business Workflow < 1.18.1 - Authorization Bypass via Document ID Manipulation

Title source: llm

Description

In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. By doing this, users can add attachments to workitems that do not belong to them.

References (2)

Core 2

Core References

Product x_refsource_misc

https://www.tangro.de/

Exploit, Third Party Advisory x_refsource_misc

https://blog.to.com/advisory-tangro-bwf-1-17-5-multiple-vulnerabilities/

Scores

CVSS v3 4.3

EPSS 0.0057

EPSS Percentile 43.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

CWE

CWE-639

Status published

Products (1)

tangro/business_workflow < 1.18.1

Published Dec 18, 2020

Tracked Since Feb 18, 2026