alibabacloud-web-application-attacks-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads origin web access logs (Nginx/Apache/IIS) supplied by the user, which may contain outsider-authored input (such as user agents, referers, and request paths) that is parsed and processed by the agent.