Threats tagged 'ghsa-rfjj-gh5g-wr2c'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants. This is due to insufficient input validation of uploaded custom module content, which can be processed with privileges beyond the attacker's own tenant.