Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-28087

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-76v2-48w6-crxr

Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable.

gitlab/maven/org.bonitasoft.engine/bonita-server/CVE-2024-28087

Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable.