CVE-2020-1959

A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution RCE vulnerability. Apache Syncope uses Java Bean Validation JSR 380 custom constraint validators. When...

PT-2020-15194

Name of the Vulnerable Software and Affected Versions Apache Syncope versions 2.0.0 through 2.0.14 Apache Syncope versions 2.1.0 through 2.1.5 Description A Server-Side Template Injection vulnerability was discovered in the Mail templates of Apache Syncope, allowing attackers to inject arbitrary...

CVE-2020-1961: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution RCE was discovered...

PT-2020-15192

Name of the Vulnerable Software and Affected Versions Apache Syncope versions prior to 2.1.6 Description A Server-Side Template Injection issue allows attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution RCE vulnerability. Apache Syncope uses Java...

PT-2020-9916

Name of the Vulnerable Software and Affected Versions Apache Syncope EndUser UI versions prior to 2.0.15 Apache Syncope EndUser UI versions prior to 2.1.6 Description The Apache Syncope EndUser UI login page reflects the successMessage parameters, allowing a user to execute JavaScript code from a...

CVE-2020-1959: Improper Neutralization of Special Elements used in an Expression Language Statement

A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution RCE vulnerability. Apache Syncope uses Java Bean Validation JSR 380 custom constraint validators. When...

CVE-2019-17557: Improper Neutralization of Input During Web Page Generation

It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string...

Apache Syncope XSLT Code Execution

The vulnerability of the XSLT Extensible Stylesheet Language Transformations implementation of the Apache Syncope system’s digital identifier management mechanism is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to read files, write files, or...

XML External Entity (XXE)

apache syncope is vulnerable to XML external entity attacks XXE. An attacker is able to read and write arbitrary files and execute arbitrary code using malicious DTDs in the workflow definition entitlements...

Apache Syncope Cross-Site Scripting Vulnerability

Apache Syncope is an open source system for managing digital identities in enterprise environments, implemented using Java EE technology and released under the Apache 2.0 license. A stored cross-site scripting vulnerability exists in Apache Syncope. A malicious user with sufficient administrative...

Apache Syncope XML External Entity Injection Vulnerability

Apache Syncope is an open source system for managing digital identities in enterprise environments, implemented using Java EE technology and released under the Apache 2.0 license. Apache Syncope suffers from an XML external entity injection vulnerability. An administrator with workflow definition...

org.apache.syncope:syncope-core-upgrader (>=1.2.0-m1, <=1.2.10), org.apache.syncope:syncope-standalone (>=1.1.0, <=1.1.8) potentially affected by CVE-2018-1321 via org.apache.syncope:syncope-core (>=1.1.0, <=1.2.10)

org.apache.syncope:syncope-core MAVEN version =1.1.0, =1.2.0-m1, =1.1.0, =1.1.8 Source cves: CVE-2018-1321 Source advisory: GHSA-XGC9-9W4V-H33H...

High severity vulnerability that affects org.apache.syncope:syncope-core

An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11 and 2.0.x before 2.0.8 can use XSL Transformations XSLT to perform malicious operations, including but not limited to file read, file write, and code execution...

GHSA-XGC9-9W4V-H33H High severity vulnerability that affects org.apache.syncope:syncope-core

An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11 and 2.0.x before 2.0.8 can use XSL Transformations XSLT to perform malicious operations, including but not limited to file read, file write, and code execution...

org.apache.syncope:syncope-core-upgrader (>=1.2.0-m1, <=1.2.10), org.apache.syncope:syncope-standalone (>=1.1.0, <=1.1.8) potentially affected by CVE-2018-1321 via org.apache.syncope:syncope-core (>=1.1.0, <=1.2.10)

org.apache.syncope:syncope-core MAVEN version =1.1.0, =1.2.0-m1, =1.1.0, =1.1.8 Source cves: CVE-2018-1321 Source advisory: OSV:GHSA-XGC9-9W4V-H33H...

GHSA-V3VF-2R98-XW8W Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope

An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11 and 2.0.x before 2.0.8 can recover sensitive security values using the fiql and orderby parameters...

org.apache.syncope:syncope-core-upgrader (>=1.2.0-m1, <=1.2.10), org.apache.syncope:syncope-standalone (>=1.1.0, <=1.1.8) potentially affected by CVE-2018-1322 via org.apache.syncope:syncope-core (>=1.1.0, <=1.2.10)

org.apache.syncope:syncope-core MAVEN version =1.1.0, =1.2.0-m1, =1.1.0, =1.1.8 Source cves: CVE-2018-1322 Source advisory: OSV:GHSA-V3VF-2R98-XW8W...

org.apache.syncope:syncope-core-upgrader (>=1.2.0-m1, <=1.2.10), org.apache.syncope:syncope-standalone (>=1.1.0, <=1.1.8) potentially affected by CVE-2018-1322 via org.apache.syncope:syncope-core (>=1.1.0, <=1.2.10)

org.apache.syncope:syncope-core MAVEN version =1.1.0, =1.2.0-m1, =1.1.0, =1.1.8 Source cves: CVE-2018-1322 Source advisory: GHSA-V3VF-2R98-XW8W...

Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope

An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11 and 2.0.x before 2.0.8 can recover sensitive security values using the fiql and orderby parameters...

org.apache.syncope:syncope-core-upgrader (1.2.5) potentially affected by CVE-2018-17184 via org.apache.syncope:syncope-core (1.2.5)

org.apache.syncope:syncope-core MAVEN version 1.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope:syncope-core and may be impacted: - org.apache.syncope:syncope-core-upgrader 1.2.5 Source cves: CVE-2018-17184 Source advisory:...