CVE-2022-39036 — FLOWRING Agentflow BPM - Arbitrary File Upload
The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload …
Published: 2022-11-10 · CVSS: 9.8 · CVSS 3.1
The file upload function of Agentflow BPM has insufficient filtering for special characters in URLs. An unauthenticated remote attacker can exploit this vulnerability to upload arbitrary file and execute arbitrary code to manipulate system or disrupt service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7