Lucene search
Veracode Vulnerability DatabaseVERACODE:25158HistoryMay 04, 2020 - 5:58 a.m.
Server-Side Template Injection
2020-05-0405:58:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.001 Low
EPSS
Percentile
43.1%
syncope-core-provisioning-java is vulnerable to server-side template injection. Remote attackers are able to inject arbitrary JEXL expressions via the Mail templates and execute arbitrary code on the system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache syncope core provisioning java | le | 2.1.5 | |
| apache syncope core provisioning java | le | 2.0.14 |
Related
cve
cve
CVE-2020-1961
2020-05-04 13:15:14
osv
osv
Injection in Apache Syncope
2021-06-16 17:18:49
CVE-2020-1961
2020-05-04 13:15:14
prion
prion
Design/Logic Flaw
2020-05-04 13:15:00
nvd
nvd
CVE-2020-1961
2020-05-04 13:15:14
github
github
Injection in Apache Syncope
2021-06-16 17:18:49
cvelist
cvelist
CVE-2020-1961
2020-05-04 12:28:53