Package · Maven

org.apache.syncope.client:syncope-client-console

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.1

CVE-2024-45031

Apache Syncope: Stored XSS in Console and Enduser

When editing objects in the Syncope Console, incomplete HTML tags could be used to bypass HTML sanitization. This made it possible to inject stored XSS payloads which would trigger for other users during ordinary usage of the application. XSS payloads could a…

Apache Software Foundation Apache Syncope org.apache.syncope.client:syncope-client-console Maven

Oct 24, 2024