Uploaded image for project: 'camunda BPM'
  1. camunda BPM
  2. CAM-4598

Communicate security enhancements due to bug fix CAM-3915

    XMLWordPrintable

Details

    • Task
    • Resolution: Fixed
    • L3 - Default
    • 7.3.3, 7.2.8, 7.4.0-alpha3
    • None
    • None
    • None

    Description

      With the fix for CAM-3915, we change default behavior in the engine for the sake of securing the API and tasklist. People can restore the current behavior by using an engine configuration flag. In that case, people must set that in the engine configuration when upgrading.

      mgm-controller-panel

        This is the controller panel for Smart Panels app

        Attachments

          Issue Links

            depends on

            Task - A task that needs to be done. CAM-4051 Add security warning about script execution to the docs

            • L3 - Default - Minor issue or issue with existing workaround, feature requests and questions
            • Closed
            is related to

            Bug Report - A problem which impairs or prevents the functions of the product. CAM-3915 Security vulnerability due to the possibility to include EL in task queries

            • L3 - Default - Minor issue or issue with existing workaround, feature requests and questions
            • Closed

            Activity

              People

                gimbel Robert Gimbel
                thorben.lindhauer Thorben Lindhauer
                Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved:

                  Salesforce