Bonitasoft Bonita_web
2 CVEs affecting Bonitasoft Bonita_web. Latest disclosed: 2024-02-27. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25237 | Critical | 9.8 | 2022-06-02 | Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFil… |
CVE-2024-26542 | Medium | 6.1 | 2024-02-27 | Cross Site Scripting vulnerability in Bonitasoft, S.A v.7.14. and fixed in v.9.0.2, 8.0.3, 7.15.7, 7.14.8 allows attackers to execute arbitrary code via a craf… |