SCIMono <0.0.19 - Remote Code Execution

SCIMono before 0.0.19 is vulnerable to remote code execution because it is possible for an attacker to inject and execute java expressions and compromise the availability and integrity of the system. id: CVE-2021-21479 info: name: SCIMono 0.0.19 - Remote Code Execution author: dwisiswant0 severit...

CVE-2021-21479

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system...

VulnCheck KEV: CVE-2021-21479

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system...

com.sap.scimono.examples:simple-server (>=0.0.2 <=0.0.18), com.sap.scimono:scimono-client (>=0.0.1 <=0.0.18) +1 more potentially affected by CVE-2021-21479 via com.sap.scimono:scimono-server (>=0.0.1 <=0.0.18)

com.sap.scimono:scimono-server MAVEN version =0.0.1, =0.0.2, =0.0.1, =0.0.11, =0.0.18 Source cves: CVE-2021-21479 Source advisory: OSV:GHSA-29Q4-GXJQ-RX5C...

CVE-2021-21479

creationtimestamp| type| source ---|---|--- 2021-02-10 00:41:02+00:00| seen| https://t.me/cibsecurity/23344 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21479.yaml 2024-09-21 16:06:46+00:00| published-proof-of-concept...

CVE-2021-21479

SCIMono versions before 0.0.19 are affected by CVE-2021-21479, a remote code execution vulnerability due to the ability to inject and execute Java expressions. This can compromise system availability and integrity. The issue is documented across multiple sources (e.g., GHSA-29Q4-GXJQ-RX5C, NVD en...