CVE-2024-46481

Name of the Vulnerable Software and Affected Versions: Venki Supravizio BPM versions up to 18.1.1

Description: The login page of Venki Supravizio BPM is vulnerable to an open redirect that leads to reflected XSS. This issue can be exploited via a specially crafted link.

Recommendations: For versions up to 18.1.1, consider disabling the login page functionality until a patch is available to prevent open redirect and reflected XSS exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.