BPMFlowWebkit Arbitrary File Upload Vulnerability Allowing Remote Code Execution
Vulnerability
An arbitrary file upload vulnerability has been identified in BPMFlowWebkit, developed by WELLTEND TECHNOLOGY, affecting versions prior to 5.0.5. This vulnerability allows unauthenticated remote attackers to upload and execute web shell backdoors, enabling arbitrary code execution on the server.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server.
Remediation
Users are advised to update to BPMFlowWebkit version 5.0.5 or later.
Added: Dec 29, 2025, 8:17 AM
Updated: Dec 29, 2025, 4:21 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
7.4remediation
7.7relevance
1.8threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.