CVE record · 1 source
CVE-2026-113687
Improper isolation or compartmentalization vulnerability in Apache Syncope.
- Vendor
- Apache Software Foundation
- Product
- Apache Syncope
- Weakness
- CWE-653
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper isolation or compartmentalization vulnerability in Apache Syncope.
Improper isolation or compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements for Implementations can create a malicious Groovy class running untrusted code on a separate Thread, thus…