CVE-2024-28087
In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been re…
Published: 2024-05-15 · CVSS: 6.5 · CVSS 3.1
In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7