CVE-2024-38503

creationtimestamp| type| source ---|---|--- 2024-07-22 12:48:01+00:00| seen| https://t.me/cvedetector/1409...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.7), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.7) +13 more potentially affected by CVE-2024-38503 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=3.0.0-m0, <=3.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.7 - org.apache.syncope.ext.saml2sp...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.7), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.7) +5 more potentially affected by CVE-2024-38503 via org.apache.syncope.client.idrepo:syncope-client-idrepo-console (>=3.0.0-m0, <=3.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-console MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.7 Source cves: CVE-2024-38503 Source advisory: OSV:GHSA-8PXV-X6JQ-5VW9...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.7), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.7) +5 more potentially affected by CVE-2024-38503 via org.apache.syncope.client.idrepo:syncope-client-idrepo-console (>=3.0.0-m0, <=3.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-console MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.7 Source cves: CVE-2024-38503 Source advisory: GHSA-8PXV-X6JQ-5VW9...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.7), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.7) +13 more potentially affected by CVE-2024-38503 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=3.0.0-m0, <=3.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.7 - org.apache.syncope.ext.saml2sp...

CVE-2024-38503 Apache Syncope: HTML tags can be injected into Console or Enduser text fields

When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”. Users are recommended to upgrade to...

CVE-2024-38503 Apache Syncope: HTML tags can be injected into Console or Enduser text fields

When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”. Users are recommended to upgrade to...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.7), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.7) +13 more potentially affected by CVE-2024-38503 via org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui (>=3.0.0-m0, <=3.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.7 - org.apache.syncope.ext.saml2sp...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.7), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.7) +5 more potentially affected by CVE-2024-38503 via org.apache.syncope.client.idrepo:syncope-client-idrepo-console (>=3.0.0-m0, <=3.0.7)

org.apache.syncope.client.idrepo:syncope-client-idrepo-console MAVEN version =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.7 Source cves: CVE-2024-38503 Source advisory: MEND:CVE-2024-38503...