CVE Intelligence

Vulnerabilidades do Dromara Warm-flow

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Dromara Warm-flow: 1 registro(s), com versões afetadas e correções.

CVE-2026-6125 Média · 6.3 CWE-74 12/04/2026
Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection
A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.