Moole Vulnerability Database

Find real vulnerabilities before they ship

Critical

CVE-2021-21479

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.

VectorNETWORK

PublishedFeb 09, 2021, 21:15

Published Bycna@sap.com

Base Score

Score9.1

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

com.sap.scimono:scimono-server(Maven)00.0.19N/A

References

https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c

Weakness Type

CWE-74

CVSS Metrics

Base Score

9.1

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Base SeverityCritical

Version

3.1

Attack Vector (AV)

NETWORK