CVE-2018-1321

EPSS 18.0%

Vexday Risk Score

28Low

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS —EPSS 18.0%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

20 Mar 2018Published on NVD

13 Sep 2018Public PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, including but not limited to file read, file write, and code execution.

Affected products

Apache Software Foundation · Apache Syncope

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/45400/unverified exploitdbwww.exploit-db.com/exploits/45400unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.exploit-db.com/exploits/45400/http://syncope.apache.org/security.html#CVE-2018-1321:_Remote_code_execution_by_administrators_with_report_and_template_entitlements http://www.securityfocus.com/bid/103508