springboot-item-submit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text is ingested into the LLM context via the runtime HTTP request body/parameters for title, description, and admin note (e.g., MemberSubmissionController#create and AdminSubmissionController#approve/#reject), which originate from other users’ browser inputs.