Remote Code Execution (RCE)

com.ritense.valtimo, core is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper restriction of script execution within process definitions in the Camunda/Operator engine, which allows admins with process-definition privileges to execute arbitrary code or access sensitiv...