CVE-2018-1322
1 advisory.
Maven/org.apache.syncope:syncope-core CVE-2018-1322: medium 4.9, EPSS 19.92%
Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope
Action: Upgrade org.apache.syncope:syncope-core to 1.2.11 (1.x) or 2.0.8 (2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.11 | - |
| 2.0.0 | 2.0.8 | - |
Fixed versions
| 1.2.11 | 2.0.8 |
Sources
- osv: GHSA-v3vf-2r98-xw8w
- https://nvd.nist.gov/vuln/detail/CVE-2018-1322
- https://github.com/apache/syncope/commit/44a5ca0fbd357b8b5d81aa9313fb01cca30d8ad
- https://github.com/apache/syncope/commit/735579b6f987b407049ac1f1da08e675d957c3e
- https://github.com/advisories/GHSA-v3vf-2r98-xw8w
- https://github.com/apache/syncope
- https://www.exploit-db.com/exploits/45400
- http://syncope.apache.org/security.html#CVE-2018-1322:_Information_disclosure_via_FIQL_and_ORDER_BY_sorting
- http://www.securityfocus.com/bid/103507
CVE-2018-1322 · published · modified · JSON