Threats tagged 'ghsa-h6rq-g6v8-5257'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote authenticated attacker to perform arbitrary file reads and server-side request forgery. This is due to insufficient restrictions on externally referenced content in submitted definitions, which can be exploited to retrieve content and return it to the attacker.