| Package | Affected versions | Patched versions |
|---|---|---|
| business process management | < 5.8.8.1 | 5.8.8.1 |
Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free