Threats tagged 'ghsa-q3rf-5433-9w3w'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that could allow a remote authenticated attacker to execute arbitrary code. This occurs due to improper control over code generation influenced by user-supplied input. The vulnerability has a low CVSS score of 3.3 and requires high attack complexity and privileges with no user interaction needed.