Skip to content
OpenAdvisories

Archive

20 March 2018

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.2
    CVE-2018-1321 Public exploit EPSS 18%

    High severity vulnerability that affects org.apache.syncope:syncope-core

    An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, includin…