Bonita Authorization Bypass (CVE-2022-25237)
Description
Bonita is an open-source business process management system.
Bonita 2021.2 (and earlier) has an authorization bypass vulnerability. An attacker can bypass the authorization with a specially crafted HTTP request and get privileged access to the system. This can lead to remote code execution by abusing the API.
Remediation
Upgrade to the latest version of Bonita