GHSA-29q4-gxjq-rx5c
Remote Code Execution in SCIMono
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.sap.scimono:scimono-server | < 0.0.19 | 0.0.19 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
It is possible for attacker to inject and execute java expression and compromising the availability and integrity of the system.
### Patches
The issue was fixed on [0.0.19 version](https://mvnrepository.com/artifact/com.sap.scimono/scimono-server/0.0.19)
References
External links from the advisory. They lead to third-party sites.