Valtimo vulnerabilities
We track 1 vulnerability in Valtimo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Valtimo vulnerabilities
- 9.8 Critical severity
valtimo-frontend-libraries: Insertion of Sensitive Information into Log File
Valtimo is an open source business process and case management platform. When opening a form in Valtimo, the access token (JWT) of the user is exposed to `api.form.io` via the the `x-jwt-token` header. An attacker can retrieve personal information from this to