CVE-2022-42435

Name of the Vulnerable Software and Affected Versions IBM Business Automation Workflow versions 18.0.0 through 22.0.1

Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery.

Recommendations For versions 18.0.0 through 22.0.1, update to a version that is not affected by this issue to prevent cross-site request forgery attacks. As a temporary workaround, consider implementing additional validation for requests to prevent unauthorized actions. Restrict access to sensitive operations to minimize the risk of exploitation.