Threats tagged 'ghsa-29x9-g353-m9xx'

A code injection vulnerability exists in FlowCI flow-core-x versions up to 1.23.49 in the ConditionManagerImpl.run function related to Groovy Script Evaluation. This vulnerability allows remote attackers with low privileges to manipulate the condition argument, potentially leading to code injection with partial confidentiality, integrity, and availability impact. The vulnerability has a high severity score of 7.4 and public exploit details have been disclosed. The vendor has not responded or provided a patch.