Security Advisory

CVE-2018-1321

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-03-20 17:00:00

Last updated 2024-09-16 18:03:42

Assigner apache

State PUBLISHED

Description

An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, including but not limited to file read, file write, and code execution.

← Browse all CVEs View on cve.org ↗