high7.2
CVE-2018-17186
An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and cod…
Impact
An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Syncope | from 2.0.0 through 2.0.11 from 2.1.0 through 2.1.2 |