Improper Control of Dynamically-Managed Code Resources
Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE. This vulnerability affects versions 3.1.x prior to 3.1.13.
CWE-913 - Improper Control of Dynamically-Managed Code Resources
The software does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.