GHSA-29q4-gxjq-rx5cHigh

Remote Code Execution in SCIMono

Published
February 10, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-21479 →

📋 Description

Impact

It is possible for attacker to inject and execute java expression and compromising the availability and integrity of the system.

Patches

The issue was fixed on 0.0.19 version

🎯 Affected products1

  • maven/com.sap.scimono:scimono-server:< 0.0.19

🔗 References (5)