Threats tagged 'ghsa-qx7m-8v34-28ww'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.4%	CVE-2026-78336syncope-core · Insertion of sensitive information into sent data vulnerability in Apache Syncope High7.5EPSS 0.4%2026-09-14GCVE DatabaseCVE-2026-78336 A vulnerability in Apache Syncope allows any authenticated user to retrieve the list of configured OpenID Connect (OIDC) providers for Single Sign-On (SSO). The response includes all configuration details, including client secrets, regardless of the user's entitlements. This affects Apache Syncope versions from 3.0.0-M0 through 3.0.16, 4.0.0-M0 through 4.0.7, and 4.1.0-M0 through 4.1.2. Upgrading to versions 4.0.8 or 4.1.3 mitigates this issue. EPSS 0.4%Report on CVE-2026-78336 Vulnerability CWE-201 #ghsa-qx7m-8v34-28ww	GCVE Database	2026-09-14

Page 1 of 1