| Package | Affected versions | Patched versions |
|---|---|---|
| business workflow | < 1.18.1 | 1.18.1 |
In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change profile information of other users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free