Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-4w4p-xwrr-9crh

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4w4p-xwrr-9crh

Injection in Apache Syncope Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered.

gitlab/maven/org.apache.syncope/syncope-core/CVE-2020-1961

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered.