Skip to content
Tangro vulnerabilities
Newest
-
tangro business workflow
In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document...
CVE-2020-26171
4.3 Medium
-
tangro business workflow
Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows...
CVE-2020-26172
4.2 Medium
-
tangro business workflow
An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an...
CVE-2020-26173
3.1 Low
-
tangro business workflow
tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and...
CVE-2020-26174
8.8 High
-
tangro business workflow
In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in...
CVE-2020-26175
6.5 Medium
-
tangro business workflow
An issue was discovered in tangro Business Workflow before 1.18.1. No (or broken) access control...
CVE-2020-26176
4.3 Medium
-
tangro business workflow
In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed...
CVE-2020-26177
4.3 Medium
-
tangro business workflow
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download...
CVE-2020-26178
5.3 Medium