PT-2024-28040 · Unknown +1 · Syncope Console +2

Name of the Vulnerable Software and Affected Versions: Syncope versions prior to 3.0.8 Description: The issue allows HTML tags to be added to any text field when editing a user, group, or object in the Syncope Console, potentially leading to exploits. The same vulnerability is found in the Syncop...

org.apache.syncope.client.am:syncope-client-am-console (>=3.0.0-m0, <=3.0.6), org.apache.syncope.client.idm:syncope-client-idm-console (>=3.0.0-m0, <=3.0.6) +14 more potentially affected by CVE-2024-27439 via org.apache.wicket:wicket (>=9.11.0, <=9.16.0)

org.apache.wicket:wicket MAVEN version =9.11.0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.0-m0, =3.0.6 - org.apache.syncope.e...

K49033153: Apache Syncope vulnerabilities CVE-2018-1321 and CVE-2018-1322

Security Advisory Description CVE-2018-1321 An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations XSLT to perform malicious operations,...

com.googlecode.wicket-jquery-ui:jquery-ui-core (1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-kendo (1.2.0) +18 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.6)

org.apache.wicket:wicket-core MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:jquery-ui-core 1.2.0 - com.googlecode.wicket-jquery-ui:jquery-ui-kend...

com.code-troopers:wicket-daterangepicker (>=0.1, <=0.2), com.code-troopers:wicket-editable-grid (0.1) +217 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.8.0)

org.apache.wicket:wicket-core MAVEN version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.code-troopers:wicket-daterangepicker =0.1, =6.8.0, =6.8.0, =6.8.0, =6.8.0, =6.8.0, =1.1, =0.8.2,...

com.github.skeychen:dswork-config (>=9.0.1, <=9.1.1), com.github.skeychen:dswork-javaweb (>=9.0.1, <=9.1.1) +73 more potentially affected by CVE-2016-1000027 via org.springframework:spring-web (4.3.28.release)

org.springframework:spring-web MAVEN version 4.3.28.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.github.skeychen:dswork-config =9.0.1, =9.0.1, =9.0.1, =9.0.1, =2.2.0, =2.2.0, =2.2.0,...

org.apache.syncope:syncope-core (>=1.0.9, <=1.1.8), org.springframework.security:spring-security-cas (3.1.6.release) +5 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-web (3.1.6.release)

org.springframework.security:spring-security-web MAVEN version 3.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.apache.syncope:syncope-core =1.0.9, =1.4.9, =1.4.9,...

Apache Syncope uses a weak PNRG

Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack...

GHSA-4C72-MRHF-23CG Apache Syncope uses a weak PNRG

Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack...

Apache Syncope JEXL Code Injection

Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."...

GHSA-R2XF-W5PJ-9PW8 Apache Syncope JEXL Code Injection

Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."...

net.sf.ehcache:ehcache-jgroupsreplication (>=1.4, <=1.5), org.codehaus.fabric3:fabric3-binding-zeromq (1.9) +3 more potentially affected by CVE-2016-2141 via org.jgroups:jgroups (2.10.0.ga)

org.jgroups:jgroups MAVEN version 2.10.0.ga is affected by a known vulnerability. The following packages have a transitive dependency on org.jgroups:jgroups and may be impacted: - net.sf.ehcache:ehcache-jgroupsreplication =1.4, =1.7, =1.7, =0.2, =0.2.3 Source cves: CVE-2016-2141 Source advisory:...

org.apache.syncope.fit:syncope-fit-build-tools (>=2.0.9, <=2.1.0), org.jooby:jooby-apitool (>=1.5.0, <=1.6.9) +1 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.17.1)

org.webjars:swagger-ui MAVEN version 3.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.apache.syncope.fit:syncope-fit-build-tools =2.0.9, =1.5.0, =1.5.0, =1.6.9 Source cves: CVE-2018-25031 Source...

com.github.j5ik2o:grpc-gateway-runtime_2.12 (>=1.0.0, <=1.0.3), com.github.j5ik2o:grpc-gateway-runtime_2.13 (>=1.0.0, <=1.0.3) +2 more potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.19.4)

org.webjars:swagger-ui MAVEN version 3.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.github.j5ik2o:grpc-gateway-runtime2.12 =1.0.0, =1.0.0, =2.0.11, =2.1.2 Source cves: CVE-2018-25031 Source...

org.apache.cxf.systests:cxf-systests-jaxrs (>=3.2.6, <=3.2.10), org.apache.syncope.fit:syncope-fit-build-tools (>=2.0.10, <=2.1.1) potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.17.6)

org.webjars:swagger-ui MAVEN version 3.17.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - org.apache.cxf.systests:cxf-systests-jaxrs =3.2.6, =2.0.10, =2.1.1 Source cves: CVE-2018-25031 Source advisory:...

org.apache.syncope.ext.oidcclient:syncope-ext-oidcclient-client-enduser (>=2.0.9, <=2.0.14), org.apache.syncope.ext.saml2sp:syncope-ext-saml2sp-client-enduser (>=2.0.3, <=2.0.14) potentially affected by CVE-2019-17557 via org.apache.syncope.client:syncope-client-enduser (>=2.0.3, <=2.0.14)

org.apache.syncope.client:syncope-client-enduser MAVEN version =2.0.3, =2.0.9, =2.0.3, =2.0.14 Source cves: CVE-2019-17557 Source advisory: OSV:GHSA-6QJ8-C27W-RP33...

org.apache.syncope.ext.oidcclient:syncope-ext-oidcclient-client-enduser (>=2.0.9, <=2.0.14), org.apache.syncope.ext.saml2sp:syncope-ext-saml2sp-client-enduser (>=2.0.3, <=2.0.14) potentially affected by CVE-2019-17557 via org.apache.syncope.client:syncope-client-enduser (>=2.0.3, <=2.0.14)

org.apache.syncope.client:syncope-client-enduser MAVEN version =2.0.3, =2.0.9, =2.0.3, =2.0.14 Source cves: CVE-2019-17557 Source advisory: GHSA-6QJ8-C27W-RP33...

org.apache.syncope.ext.flowable:syncope-ext-flowable-client-enduser (>=2.1.3, <=2.1.5), org.apache.syncope.ext.oidcclient:syncope-ext-oidcclient-client-enduser (>=2.1.0, <=2.1.5) +1 more potentially affected by CVE-2019-17557 via org.apache.syncope.client:syncope-client-enduser (>=2.1.0, <=2.1.5)

org.apache.syncope.client:syncope-client-enduser MAVEN version =2.1.0, =2.1.3, =2.1.0, =2.1.0, =2.1.5 Source cves: CVE-2019-17557 Source advisory: OSV:GHSA-6QJ8-C27W-RP33...

org.apache.syncope.ext.flowable:syncope-ext-flowable-client-enduser (>=2.1.3, <=2.1.5), org.apache.syncope.ext.oidcclient:syncope-ext-oidcclient-client-enduser (>=2.1.0, <=2.1.5) +1 more potentially affected by CVE-2019-17557 via org.apache.syncope.client:syncope-client-enduser (>=2.1.0, <=2.1.5)

org.apache.syncope.client:syncope-client-enduser MAVEN version =2.1.0, =2.1.3, =2.1.0, =2.1.0, =2.1.5 Source cves: CVE-2019-17557 Source advisory: GHSA-6QJ8-C27W-RP33...

GHSA-6QJ8-C27W-RP33 Cross-site scripting in Apache Syncome EndUser

It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string...