@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and all users are advised to update.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2021-08-11T17:25:09

Updated: 2024-08-04T01:23:01.532Z

Reserved: 2021-07-29T00:00:00

Link: CVE-2021-37694

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-08-11T18:15:07.403

Modified: 2024-11-21T06:15:43.283

Link: CVE-2021-37694

cve-icon Redhat

No data.