https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:51:01.458725+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-38503 CVE-2024-38503 — Apache Syncope: HTML tags can be injected into Console or Enduser text fields 2026-10-07T17:51:01.475446+00:00

Affected: Apache Software Foundation Apache Syncope

When editing a user, group or any object in the Syncope Console, HTML tags could be added to any text field and could lead to potential exploits. The same vulnerability was found in the Syncope Enduser, when editing “Personal Information” or “User Requests”.

Users are recommended to upgrade to version 3.0.8, which fixes this issue.