CVE-2024-5683

Improper Control of Generation of Code ('Code Injection') vulnerability in Next4Biz CRM & BPM Software Business Process Manangement (BPM) allows Remote Code Inclusion. This issue affects Business Process Manangement (BPM): from 6.6.4.4 before 6.6.4.5.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - iletisim@usom.gov.tr

Published

2024-06-24

Last modified

2026-06-03

Weaknesses

CWE-94

Affected products

• Business Process Manangement (Next4biz Crm And Bpm Software)
• Business Process Manangement Bpm (Next4biz Crm Bpm Software)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0739
• https://www.usom.gov.tr/bildirim/tr-24-0739