CVE-2026-129173
A security flaw has been discovered in Stirling-Tools Stirling-PDF up to 3.3.0. Affected is the function WorkflowParticipantController.getPa
CVSS
5.3
Média
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 13 de nov. de 2026 · Última mod.: 13 de nov. de 2026
Ainda não há histórico EPSS suficiente.
A security flaw has been discovered in Stirling-Tools Stirling-PDF up to 3.3.0. Affected is the function WorkflowParticipantController.getParticipantDetails of the file app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/WorkflowParticipantController.java of the component Participant Details Endpoint. Performing a manipulation results in insufficient session timeout value. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.
Nenhum CVE relacionado por CWE ou produto.