1 matches found
@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification
Summary A template injection vulnerability in the createworkflowfornotification tool lets a caller embed Jinja2 expressions that the Dynatrace workflow engine evaluates at runtime, exfiltrating event data to attacker-controlled destinations through a workflow that persists in the tenant after the...
6AI score
SaveExploits0References5Affected Software1
20