Beveiligingsadvies

CVE-2026-6125

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-12 09:30:22

Laatst bijgewerkt 2026-04-13 17:47:46

Toegewezen door VulDB

CVSS-score 6.5

Status PUBLISHED

Beschrijving

A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

← Alle CVE's bekijken Bekijk op cve.org ↗