Skip to content
OpenAdvisories

Package · Maven

org.apache.syncope:syncope-core

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2018-1321 Public exploit EPSS 18%

    High severity vulnerability that affects org.apache.syncope:syncope-core

    An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, includin…

    Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven