Skip to content
OpenAdvisories

Package · Maven

org.apache.syncope:syncope-core

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2018-1322 Public exploit EPSS 20%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope

    An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.

    Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven