Expression Language Injection

Overview Affected versions of this package are vulnerable to Expression Language Injection via the getRuntime function accessible via the /snail-job/workflow/check-node-expression endpoint. An attacker can execute arbitrary code by manipulating the nodeExpression argument to trigger...