https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:32:13.262981+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-33808 cnvd-2024-33808 2026-10-06T00:32:13.268548+00:00 cnvd-2024-33808 https://cve.radiocsirt.org/vuln/euvd-2026-206416 EUVD-2026-206416 2026-10-06T00:32:13.268590+00:00 EUVD-2026-206416 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38503 fkie_cve-2024-38503 2026-10-06T00:32:13.268606+00:00

When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”.

Users are recommended to upgrade to version 3.0.8, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-8pxv-x6jq-5vw9 GHSA-8pxv-x6jq-5vw9 — Apache Syncope Improper Input Validation vulnerability 2026-10-06T00:32:13.268642+00:00

Affected: Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-common-ui, Maven: org.apache.syncope.client.idrepo:syncope-client-idrepo-console

When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing "Personal Information" or "User Requests".

Users are recommended to upgrade to version 3.0.8, which fixes this issue.