Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Asyncapi Subscribe
Filtered by product Java-spring-cloud-stream-template
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-37694 1 Asyncapi 1 Java-spring-cloud-stream-template 2021-09-13 6.8 MEDIUM 7.8 HIGH
@asyncapi/java-spring-cloud-stream-template generates a Spring Cloud Stream (SCSt) microservice. In versions prior to 0.7.0 arbitrary code injection was possible when an attacker controls the AsyncAPI document. An example is provided in GHSA-xj6r-2jpm-qvxp. There are no mitigations available and all users are advised to update.