Lucene search
GoogleOSV:GHSA-R2XF-W5PJ-9PW8HistoryMay 14, 2022 - 1:18 a.m.
Apache Syncope JEXL Code Injection
2022-05-1401:18:38
Google
osv.dev
7
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.6%
Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, “derived schema definition,” “user / role templates,” and “account links of resource mappings.”
Related
seebug
seebug
Apache Syncope特制Commons JEXL表达式远程代码执行漏洞
2014-04-17 00:00:00
github
github
Apache Syncope JEXL Code Injection
2022-05-14 01:18:38
prion
prion
Code injection
2014-04-17 14:55:00
securityvulns
securityvulns
[SECURITY] CVE-2014-0111 Apache Syncope
2014-05-04 00:00:00
cve
cve
CVE-2014-0111
2014-04-17 14:55:00
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
61.6%
Related for OSV:GHSA-R2XF-W5PJ-9PW8