CVE-2026-113405
CVE-2026-113405 · YS-infoware｜BA-Workflow - SQL Injection
This page contains facts from public vulnerability sources. Check the original advisory before updating.
BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents.
CVSS 8.7 · High · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
ba-workflow
- Versions
- ≥ 0, < v3.6: Affected (custom)
Update to v3.6