CVE-2024-46481

Description

The login page of Venki Supravizio BPM up to 18.1.1 is vulnerable to open redirect leading to reflected XSS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/Lorenzo-de-Sa/Vulnerability-Research ↗
• https://www.venki.com.br/ferramenta-bpm/supravizio/ ↗
• https://github.com/Lorenzo-de-Sa/Vulnerability-Research/blob/main/CVE-2024-46481.md ↗