Description

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.

Remediation

References

https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c

Related Vulnerabilities

CVE-2020-28482 Vulnerability in npm package fastify-csrf

CVE-2022-25927 Vulnerability in npm package ua-parser-js

CVE-2023-37961 Vulnerability in maven package org.jenkins-ci.plugins:assembla-auth

CVE-2016-10693 Vulnerability in npm package pm2-kafka

CVE-2017-16073 Vulnerability in npm package noderequest

Severity

Critical

Classification

CWE-74 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Tags

Third Party Advisory