CVE-2024-0195-SpiderFlow

CVE-2024-0195 Unsachgemäße Steuerung der Codegenerierung 'Code Injection' Kritisch 2024 Zusammenfassung CVE-2024-0195 ist eine kritische Code-Injection-Schwachstelle in der Webanwendung spider-flow 0.4.3, und zwar in der Funktion FunctionService.saveFunction der Datei FunctionController.java. Ein...

CVE-2024-0195 spider-flow FunctionController.java FunctionService.saveFunction code injection

A vulnerability, which was classified as critical, was found in spider-flow 0.4.3. Affected is the function FunctionService.saveFunction of the file src/main/java/org/spiderflow/controller/FunctionController.java. The manipulation leads to code injection. It is possible to launch the attack...