Lucene search
Veracode Vulnerability DatabaseVERACODE:26749HistorySep 15, 2020 - 4:34 a.m.
Arbitrary Code Execution
2020-09-1504:34:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
23.8%
syncope-ext-flowable-bpmn is vulnerable to arbitrary code execution. An administrator with workflow entitlements can use Shell Service Tasks to perform arbitrary code execution when the Flowable extension is enabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache syncope ext: flowable bpmn | le | 2.1.6 |
Related
osv
osv
Shell command injection in Apache Syncope
2021-06-16 17:19:12
CVE-2020-11977
2020-09-15 20:15:13
prion
prion
Remote code execution
2020-09-15 20:15:00
github
github
Shell command injection in Apache Syncope
2021-06-16 17:19:12
cvelist
cvelist
CVE-2020-11977
2020-09-15 19:02:51
nvd
nvd
CVE-2020-11977
2020-09-15 20:15:13
cve
cve
CVE-2020-11977
2020-09-15 20:15:13