Remote Code Execution in SCIMono · CVE-2021-21479 · GitHub Advisory Database · GitHub

Remote Code Execution in SCIMono

High severity GitHub Reviewed Published Feb 9, 2021 in SAP/scimono • Updated Feb 1, 2023

Package

com.sap.scimono:scimono-server (Maven)

Affected versions

< 0.0.19

Patched versions

0.0.19

Description

Impact

It is possible for attacker to inject and execute java expression and compromising the availability and integrity of the system.

Patches

The issue was fixed on 0.0.19 version

References

karaimin published to SAP/scimono

Feb 9, 2021

Published by the National Vulnerability Database

Feb 9, 2021

Reviewed Feb 10, 2021

Published to the GitHub Advisory Database Feb 10, 2021

Last updated Feb 1, 2023