This site has moved to the integrated Appfire documentation and information site for our apps.

From February 2024 this site is no longer updated.

Take a look here! If you have any questions please email support@appfire.com

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

Overview

This advisory discloses security vulnerabilities found and fixed in Comala Workflows.

We recommend upgrading  Comala Workflows to the latest supported version.

Affected Versions

The vulnerability affects Comala Workflows 4.8 through to 4.13.3.

The 4.13.4 release contains a fix for the issue mentioned below.

XSS Vulnerabilities

Severity

Comalatech rates the severity of these issues as Medium according to the published Atlassian Security Levels.

This is an independent assessment and you should evaluate its applicability to your own IT environment.

Description

We have fixed a reflected cross site scripting vulnerability in Comala Workflows.

Risk Mitigation

We recommend you upgrade Comala Workflows to 4.13.4 or later.

Acknowledgements

Comalatech would like to thank the KPMG Security Team for reporting this vulnerability.

  • No labels