Lucene search
GitHub Advisory DatabaseGHSA-R2XF-W5PJ-9PW8HistoryMay 14, 2022 - 1:18 a.m.
Apache Syncope JEXL Code Injection
2022-05-1401:18:38
CWE-94
GitHub Advisory Database
github.com
6
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
62.2%
Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, “derived schema definition,” “user / role templates,” and “account links of resource mappings.”
Affected configurations
Node
org.apache.syncope\Matchsyncope
ORorg.apache.syncope\Matchsyncope
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.apache.syncope:syncope | lt | 1.1.7 | |
| org.apache.syncope:syncope | lt | 1.0.9 |
Related
nvd
nvd
CVE-2014-0111
2014-04-17 14:55:06
osv
osv
Apache Syncope JEXL Code Injection
2022-05-14 01:18:38
seebug
seebug
Apache Syncope特制Commons JEXL表达式远程代码执行漏洞
2014-04-17 00:00:00
securityvulns
securityvulns
[SECURITY] CVE-2014-0111 Apache Syncope
2014-05-04 00:00:00
prion
prion
Code injection
2014-04-17 14:55:00
cve
cve
CVE-2014-0111
2014-04-17 14:55:06
cvelist
cvelist
CVE-2014-0111
2014-04-17 14:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.002 Low
EPSS
Percentile
62.2%
Related for GHSA-R2XF-W5PJ-9PW8