CyberRota
← Ana sayfaya dön

CVE-2026-57308

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-20T15:16:44.197 · Çekilme zamanı: 2026-07-21T06:06:25.436127+00:00

CyberRota Yorumu

SQL Injection riski içeriyor.

CVE
CVE-2026-57308
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
Apache

Orijinal NVD Açıklaması

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Syncope. An administrator with adequate entitlements can achieve execution of arbitrary SQL via stacked queries, leveraging unsanitized sort parameters. This issue affects Apache Syncope: from 3.0.0-M0 through 3.0.16, from 4.0.0-M0 Through 4.0.6, from 4.1.0-M0 through 4.1.1. Users are recommended to upgrade to version 4.0.7 / 4.1.2, which fix this issue.