CVE-2021-21479

EPSS 78.2%

Remote Code Execution in SCIMono

發布日:2021/2/10修改日:2026/5/4

描述

### Impact It is possible for attacker to inject and execute java expression and compromising the availability and integrity of the system. ### Patches The issue was fixed on [0.0.19 version](https://mvnrepository.com/artifact/com.sap.scimono/scimono-server/0.0.19)

受影響套件(1)

Maven/com.sap.scimono:scimono-serverfrom 0, < 0.0.19

參考連結(4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2021-21479
WEBhttps://github.com/SAP/scimono/commit/413b5d75fa94e77876af0e47be76475a23745b80
WEBhttps://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c
WEBhttps://mvnrepository.com/artifact/com.sap.scimono/scimono-server/0.0.19