Description
In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.
Remediation
References
https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c
Related Vulnerabilities
CVE-2020-28446 Vulnerability in npm package ntesseract
CVE-2017-12882 Vulnerability in maven package org.springframework.batch:spring-batch-admin
CVE-2021-20087 Vulnerability in npm package jquery-deparam
CVE-2017-12617 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2018-20821 Vulnerability in maven package org.webjars.npm:node-sass