Apache Software Foundation Syncope 1.2.0 Milestone1

CPE Details

Apache Software Foundation Syncope 1.2.0 Milestone1
apache
syncope
1.2.0
2019-06-14
12h27 +00:00
2019-06-14
12h27 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:apache:syncope:1.2.0:milestone1:*:*:*:*:*:*

Informations

Vendor

apache

Product

syncope

Version

1.2.0

Update

milestone1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2018-1321 2018-03-20 17h00 +00:00 An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, including but not limited to file read, file write, and code execution.
7.2
High
CVE-2018-1322 2018-03-20 17h00 +00:00 An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.
4.9
Medium