Description
In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.
Remediation
References
https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c
Related Vulnerabilities
CVE-2019-10313 Vulnerability in maven package org.jenkins-ci.plugins:twitter
CVE-2017-16670 Vulnerability in maven package com.smartbear.soapui:soapui-project
CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-worker
CVE-2022-31018 Vulnerability in maven package com.typesafe.play:play_2.12
CVE-2021-42697 Vulnerability in maven package com.typesafe.akka:akka-http