PRP: Flowable Exposed UI RCE#156

Open

devampkid wants to merge 7 commits intogoogle:mainfrom

devampkid:flowable

Commits on Aug 12, 2025

Flowable exposed UI
devampkid
committed

Commits on Aug 13, 2025

Commits on Sep 30, 2025

updated README.md contains both secure and vulnerable setup instructions
devampkid
committed

Commits on Feb 13, 2026

instead of a reverse proxy which removes authentication, we skip the authentication by changing the spring boot security configuration
devampkid
committed

Commits on Feb 20, 2026

Update flowable/exposed_ui/SecurityConfiguration.java

devampkid
and
robert-doyensec
authored