CVE-2024-45031

Maven/org.apache.syncope.client:syncope-client-console CVE-2024-45031: medium 6.1, EPSS 0.71%

Apache Syncope: Stored XSS in Console and Enduser

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-jmrf-85g8-x8xv
• https://nvd.nist.gov/vuln/detail/CVE-2024-45031
• https://github.com/apache/syncope/commit/0c620a9eda2c0927875c129ebae66d2ea94f3e6a
• https://github.com/apache/syncope/commit/f80d3f6cfbd71acb03ece0f7601f660ee0be7e74
• https://github.com/apache/syncope
• https://lists.apache.org/thread/fn567pfmo3s55ofkc42drz8b4kgbhp9m
• https://syncope.apache.org/security#cve-2024-45031-apache-syncope-stored-xss-in-console-and-enduser
• http://www.openwall.com/lists/oss-security/2024/10/24/2

CVE-2024-45031 · published 2024-10-24T15:31:08Z · modified 2024-11-26T19:08:13.734698Z · JSON