PT-2021-21814

Name of the Vulnerable Software and Affected Versions @asyncapi/java-spring-cloud-stream-template versions prior to 0.7.0 Description The issue allows for arbitrary code injection when an attacker controls the AsyncAPI document. This can be achieved by manipulating the operationId field in the...