Skip to content

Product

org.apache.syncope.client/syncope-client-console vulnerabilities

1 published CVE affecting org.apache.syncope.client/syncope-client-console, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.syncope.client/syncope-client-console CVEs

Newest publication first

  1. CVE-2024-45031 Apache Syncope: Stored XSS in Console and Enduser

    Published
    MediumCVSS 6.1 EPSS 0.71%

    When editing objects in the Syncope Console, incomplete HTML tags could be used to bypass HTML sanitization. This made it possible to inject stored XSS payloads which would trigger for other users during ordinary usage of the application. XSS payloads could also be injected in Sy...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.