CVE-2020-26177

4.3MEDIUM

In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users. However, this restriction is only applied c

公開日: 12/18/2020更新日: 11/21/2024
NVDで表示MITREで表示

説明

In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited by regular users. However, this restriction is only applied client-side. Manipulating any of the greyed-out values in requests to /api/profile is not prohibited server-side.

AI分析AIによる分析

影響を受ける製品

tangrobusiness_workflow

参照