Key Value Product Tangro BWF Vendor tangro software components GmbH (Heidelberg, Germany) Tested Version 1.17.5 Fixed Version 1.18.1 Mitigation Update to version >= 1.18.1 Adding Attachments to Arbitrary Workitem Key Value Vulnerability Type Insecure Direct Object Reference CVSSv3 Severity …