Itflow-org Itflow vulnerabilities
- itflow ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser... 8.0 High
- itflow-org itflow ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter 8.3 High
- itflow-org itflow ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration 8.1 High
- itflow-org itflow ITFlow Vulnerable to Authenticated Cross-Tenant Credential Disclosure via Unprotected Credential Modal 6.5 Medium