Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-0111

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r2xf-w5pj-9pw8

Apache Syncope JEXL Code Injection Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."

gitlab/maven/org.apache.syncope/syncope/CVE-2014-0111

Improper Control of Generation of Code ('Code Injection') Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition," "user / role templates," and "account links of resource mappings."