PULSE
FEED
ransompanzer reclama a RE/MAX Germany · DE · Professional Servicesransomcurious worm reclama a i*t*r***t.com · Technologyransomcurious worm reclama a t**a.comransomplay reclama a Frey Properties of Highland LLC · US · Retail & E-Commerceransomplay reclama a ARRB Group · AU · Government & Defenseransomincransom reclama a Advantage Archives · US · Professional Servicesransomincransom reclama a sportsmansguide.com · US · Retail & E-Commerceransomwallstreet reclama a Walgreen Co. · US · Retail & E-Commerceransomaoqin reclama a The Tidewater Inn · US · Hospitalityransomdark project reclama a The CCMC · CAransombravox reclama a World Wide Fittings · US · Manufacturingransomakira reclama a Galorath · US · Professional Servicesransomakira reclama a Replogle Globes · US · Manufacturingransomakira reclama a Paragon Mechanical · Manufacturingransompanzer reclama a RE/MAX Germany · DE · Professional Servicesransomcurious worm reclama a i*t*r***t.com · Technologyransomcurious worm reclama a t**a.comransomplay reclama a Frey Properties of Highland LLC · US · Retail & E-Commerceransomplay reclama a ARRB Group · AU · Government & Defenseransomincransom reclama a Advantage Archives · US · Professional Servicesransomincransom reclama a sportsmansguide.com · US · Retail & E-Commerceransomwallstreet reclama a Walgreen Co. · US · Retail & E-Commerceransomaoqin reclama a The Tidewater Inn · US · Hospitalityransomdark project reclama a The CCMC · CAransombravox reclama a World Wide Fittings · US · Manufacturingransomakira reclama a Galorath · US · Professional Servicesransomakira reclama a Replogle Globes · US · Manufacturingransomakira reclama a Paragon Mechanical · Manufacturing
← Todos os CVEs
CVE Watch13 de nov. de 2026

CVE-2026-129173

A security flaw has been discovered in Stirling-Tools Stirling-PDF up to 3.3.0. Affected is the function WorkflowParticipantController.getPa

CVSS

5.3

Média

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 13 de nov. de 2026 · Última mod.: 13 de nov. de 2026

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

A security flaw has been discovered in Stirling-Tools Stirling-PDF up to 3.3.0. Affected is the function WorkflowParticipantController.getParticipantDetails of the file app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/WorkflowParticipantController.java of the component Participant Details Endpoint. Performing a manipulation results in insufficient session timeout value. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.