CVE-2020-1961

CVE-2020-1961: vulnerability in Apache Syncope

Published · Updated

Follow this CVE+ Monitor Apache Syncope+ Monitor org.apache.syncope:syncope-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.8%
Vulnerability to Server-Side Template Injection on Mail templates for Apache Syncope 2.0.X releases prior to 2.0.15, 2.1.X releases prior to 2.1.6, enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered.
Affected products
n/a · Apache Syncope