Cedar-Expression Injection

com.cedarpolicy, cedar-java is vulnerable to Cedar-expression injection. The vulnerability is due to the toCedarExpr method failing to escape special characters in user-controlled input, which allows an attacker to inject arbitrary Cedar expressions and manipulate authorization decisions...