CVE-2020-26178

Publication date

2020-12-18 09:26:16

Family

mitre

State

PUBLISHED

Description

In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authenticated.