CVE-2021-21479

描述

### Impact It is possible for attacker to inject and execute java expression and compromising the availability and integrity of the system. ### Patches The issue was fixed on [0.0.19 version](https://mvnrepository.com/artifact/com.sap.scimono/scimono-server/0.0.19)

如何修補 CVE-2021-21479

要修補 CVE-2021-21479,請將受影響套件升級到下列已修補版本。

• Maven/com.sap.scimono:scimono-server—升級至 0.0.19 或更新版本

CVE-2021-21479 正在被利用嗎?

中等 — EPSS 為 10.0%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 0.0.19

參考連結(4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2021-21479
• WEBgithub.com/SAP/scimono/commit/413b5d75fa94e77876af0e47be76475a23745b80
• WEBgithub.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c
• WEBmvnrepository.com/artifact/com.sap.scimono/scimono-server/0.0.19