CVE-2014-0111
1 advisory.
Maven/org.apache.syncope:syncope CVE-2014-0111: medium, EPSS 3.31%
Apache Syncope JEXL Code Injection
Action: Upgrade org.apache.syncope:syncope to 1.0.9 (1.0.x) or 1.1.7 (1.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.9 | - |
| 1.1.0 | 1.1.7 | - |
Fixed versions
| 1.0.9 | 1.1.7 |
Sources
- osv: GHSA-r2xf-w5pj-9pw8
- https://nvd.nist.gov/vuln/detail/CVE-2014-0111
- https://web.archive.org/web/20201208163011/http://www.securityfocus.com/archive/1/531841/100/0/threaded
- http://mail-archives.us.apache.org/mod_mbox/www-announce/201404.mbox/%3C534CE273.9020601@apache.org%3E
- http://syncope.apache.org/security.html
CVE-2014-0111 · published · modified · JSON