https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:08:21.226230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-74069 cnvd-2020-74069 2026-10-08T20:08:21.231498+00:00 cnvd-2020-74069 https://cve.radiocsirt.org/vuln/euvd-2026-45953 EUVD-2026-45953 2026-10-08T20:08:21.231534+00:00 EUVD-2026-45953 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26174 fkie_cve-2020-26174 2026-10-08T20:08:21.231548+00:00

tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this list. However, this restriction is enforced in the browser (client-side) and can be circumvented. This allows an attacker to upload any file as an attachment to a workitem.

 https://cve.radiocsirt.org/vuln/ghsa-g862-hhr5-33gv GHSA-g862-hhr5-33gv 2026-10-08T20:08:21.231577+00:00

tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained in this list. However, this restriction is enforced in the browser (client-side) and can be circumvented. This allows an attacker to upload any file as an attachment to a workitem.

 https://cve.radiocsirt.org/vuln/gsd-2020-26174 gsd-2020-26174 2026-10-08T20:08:21.231593+00:00 gsd-2020-26174