Remote Code Execution (RCE)

Apache Syncope is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper isolation of the connector subsystem, where scripted connectors REST and SQL can execute Groovy scripts and an attacker with sufficient privileges can trigger this capability to achieve remote code...