CVE-2018-1321: Input Validation
First published: Tue Mar 20 2018(Updated: )
An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11 and 2.0.x before 2.0.8 can use XSL Transformations (XSLT) to perform malicious operations, including but not limited to file read, file write, and code execution.
Credit: security@apache.org security@apache.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apache Syncope | >=1.2.0<1.2.11 | |
| Apache Syncope | >=2.0.0<2.0.8 | |
| Apache Syncope | =1.0.0 | |
| Apache Syncope | =1.0.4 | |
| Apache Syncope | =1.0.5 | |
| Apache Syncope | =1.0.6 | |
| Apache Syncope | =1.0.7 | |
| Apache Syncope | =1.0.8 | |
| Apache Syncope | =1.0.9 | |
| Apache Syncope | =1.1.0 | |
| Apache Syncope | =1.1.1 | |
| Apache Syncope | =1.1.2 | |
| Apache Syncope | =1.1.3 | |
| Apache Syncope | =1.1.4 | |
| Apache Syncope | =1.1.5 | |
| Apache Syncope | =1.1.6 | |
| Apache Syncope | =1.1.7 | |
| Apache Syncope | =1.1.8 | |
| Apache Syncope | =1.2.0-milestone1 | |
| maven/org.apache.syncope:syncope-core | >=2.0.0<2.0.8 | 2.0.8 |
| maven/org.apache.syncope:syncope-core | <1.2.11 | 1.2.11 |
| >=1.2.0<1.2.11 | ||
| >=2.0.0<2.0.8 | ||
| =1.0.0 | ||
| =1.0.4 | ||
| =1.0.5 | ||
| =1.0.6 | ||
| =1.0.7 | ||
| =1.0.8 | ||
| =1.0.9 | ||
| =1.1.0 | ||
| =1.1.1 | ||
| =1.1.2 | ||
| =1.1.3 | ||
| =1.1.4 | ||
| =1.1.5 | ||
| =1.1.6 | ||
| =1.1.7 | ||
| =1.1.8 | ||
| =1.2.0-milestone1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://syncope.apache.org/security.html#CVE-2018-1321:_Remote_code_execution_by_administrators_with_report_and_template_entitlements
- http://www.securityfocus.com/bid/103508
- https://www.exploit-db.com/exploits/45400/
- https://nvd.nist.gov/vuln/detail/CVE-2018-1321
- https://github.com/advisories/GHSA-xgc9-9w4v-h33h (Advisory)
- https://github.com/apache/syncope/commit/726231fbf7b817bd2a9467171dcb1c0087c75bc
- https://github.com/apache/syncope/commit/ad31479c1c543ac7d26b8c882aa14f6c00c1fd0
- https://www.exploit-db.com/exploits/45400
Frequently Asked Questions
What is CVE-2018-1321?
CVE-2018-1321 is a vulnerability in Apache Syncope that allows an administrator with report and template entitlements to perform malicious operations, including file read and write, using XSL Transformations (XSLT).
How can an administrator exploit CVE-2018-1321?
An administrator can exploit CVE-2018-1321 by using XSL Transformations (XSLT) to perform malicious operations, such as file read and write.
Which versions of Apache Syncope are affected by CVE-2018-1321?
Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x are affected by CVE-2018-1321.
What is the severity of CVE-2018-1321?
CVE-2018-1321 has a severity rating of 7.2, indicating a high severity.
Are there any references available for CVE-2018-1321?
Yes, you can find references for CVE-2018-1321 at the following URLs: [http://syncope.apache.org/security.html#CVE-2018-1321:_Remote_code_execution_by_administrators_with_report_and_template_entitlements](http://syncope.apache.org/security.html#CVE-2018-1321:_Remote_code_execution_by_administrators_with_report_and_template_entitlements), [http://www.securityfocus.com/bid/103508](http://www.securityfocus.com/bid/103508), [https://www.exploit-db.com/exploits/45400/](https://www.exploit-db.com/exploits/45400/)
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-xgc9-9w4v-h33h
- alias/CVE-2018-1321
- agent/software-canonical-lookup
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/author
- agent/softwarecombine
- agent/event
- collector/nvd-cve
- source/NVD
- collector/github-advisory
- agent/tags
- agent/trending
- vendor/apache
- canonical/apache syncope
- version/apache syncope/1.2.0
- version/apache syncope/2.0.0
- version/apache syncope/1.0.0
- version/apache syncope/1.0.4
- version/apache syncope/1.0.5
- version/apache syncope/1.0.6
- version/apache syncope/1.0.7
- version/apache syncope/1.0.8
- version/apache syncope/1.0.9
- version/apache syncope/1.1.0
- version/apache syncope/1.1.1
- version/apache syncope/1.1.2
- version/apache syncope/1.1.3
- version/apache syncope/1.1.4
- version/apache syncope/1.1.5
- version/apache syncope/1.1.6
- version/apache syncope/1.1.7
- version/apache syncope/1.1.8
- version/apache syncope/1.2.0-milestone1
- package-manager/maven