| Package | Affected versions | Patched versions |
|---|---|---|
| business workflow | < 1.18.1 | 1.18.1 |
In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free