user  

Messages by Thread

• CVE-2026-114364: Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search Francesco Chicchiriccò via user
• CVE-2026-109083: Apache Syncope: Remote Code Execution via Flowable JUEL expression Francesco Chicchiriccò via user
• CVE-2026-113511: Apache Syncope: Delegated administration boundaries can be bypassed for Realm update Francesco Chicchiriccò via user
• CVE-2026-113687: Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass Francesco Chicchiriccò via user
• CVE-2026-110535: Apache Syncope: AuthProfile value escalation via self-service update Francesco Chicchiriccò via user
• [ANN] Apache Syncope 4.1.4 Francesco Chicchiriccò via user
• [ANN] Apache Syncope 4.0.9 Francesco Chicchiriccò via user
• Errors when searching for users Feder, Stephan
• Notification tasks not executed Lionel SCHWARZ
  • Re: Notification tasks not executed (fixed) Lionel SCHWARZ
  • AW: Notification tasks not executed (fixed) Okon, Markus
• CVE-2026-73236: Apache Syncope: Cross-Realm authorization bypass in delegated administration Francesco Chicchiriccò
• CVE-2026-78318: Apache Syncope: Unauthenticated reflected XSS in Console and Enduser Francesco Chicchiriccò
• CVE-2026-73579: Apache Syncope: Non-recursive Any search could skip Realms restrictions Francesco Chicchiriccò
• CVE-2026-87779: Apache Syncope: AES Secret Key disclosure via log output Francesco Chicchiriccò
• CVE-2026-78330: Apache Syncope: Privilege escalation for admin user via JWT authentication Francesco Chicchiriccò
• CVE-2026-77147: Apache Syncope: Groovy Sandbox escape for empty CommandArgs Francesco Chicchiriccò
• CVE-2026-73195: Apache Syncope: CSV export spreadsheet formula injection Francesco Chicchiriccò
• CVE-2026-73668: Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values Francesco Chicchiriccò
• CVE-2026-75030: Apache Syncope: Incomplete authorization checks for Group members deprovisioning Francesco Chicchiriccò
• CVE-2026-77181: Apache Syncope: ClientApp update entitlement not effective Francesco Chicchiriccò
• CVE-2026-87802: Apache Syncope: SRA OAuth2 JWT signature verification bypass Francesco Chicchiriccò
• CVE-2026-87785: Apache Syncope: JWT subject spoofing Francesco Chicchiriccò
• CVE-2026-86460: Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence Francesco Chicchiriccò
• CVE-2026-82232: Apache Syncope: SQL injection via sort parameter in Task search Francesco Chicchiriccò
• CVE-2026-78336: Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user Francesco Chicchiriccò
• CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist Francesco Chicchiriccò
• CVE-2026-77051: Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search Francesco Chicchiriccò
• CVE-2026-75015: Apache Syncope: Nested secrets leak cleartext into audit records readable Francesco Chicchiriccò
• CVE-2026-73470: Apache Syncope: Delegating users can grant unowned Roles Francesco Chicchiriccò
• CVE-2026-73178: Apache Syncope: JWT Access Token takeover Francesco Chicchiriccò
• CVE-2026-73370: Apache Syncope: Cross-Realm boundaries reconciliation bypass Francesco Chicchiriccò
• CVE-2026-73191: Apache Syncope: CAS service URL injection via Forwarded HTTP headers Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.8 Francesco Chicchiriccò
  • Re: [ANN] Apache Syncope 4.0.8 Lionel SCHWARZ
  • Re: [ANN] Apache Syncope 4.0.8 Francesco Chicchiriccò
  • Re: [ANN] Apache Syncope 4.0.8 Lionel SCHWARZ
• [ANN] Apache Syncope 4.1.3 Francesco Chicchiriccò
• CVE-2026-63071: Apache Syncope: RCE via Groovy Sandbox bypass Francesco Chicchiriccò
• CVE-2026-62418: Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check Francesco Chicchiriccò
• CVE-2026-62183: Apache Syncope: User self-service privilege escalation Francesco Chicchiriccò
• CVE-2026-57308: Apache Syncope: SQL injection vulnerability in Audit Events search Francesco Chicchiriccò
• CVE-2026-53421: Apache Syncope: Remote Code Execution via Scripted Connector Francesco Chicchiriccò
• CVE-2026-53405: Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.7 Francesco Chicchiriccò
  • [ANN] Apache Syncope 4.0.7 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.1.2 Francesco Chicchiriccò
• GenericPersistence:ReportingSQLException relation dynrolemembers does not exist Lionel SCHWARZ
  • Re: GenericPersistence:ReportingSQLException relation dynrolemembers does not exist Lionel SCHWARZ
  • Re: GenericPersistence:ReportingSQLException relation dynrolemembers does not exist Lionel SCHWARZ
• CVE-2026-42797: Apache Syncope: JexlContextBuilder Information Disclosure Francesco Chicchiriccò
• CVE-2026-42782: Apache Syncope: Post-auth RCE via Groovy static Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.6 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.1.1 Francesco Chicchiriccò
• spring AutoConfigurationClass.getAnnotationMetadata neo4j Stéphane Popoff
  • Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Andrea Patricelli
  • Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Stéphane Popoff
  • Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Andrea Patricelli
  • Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Francesco Chicchiriccò
  • Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Stéphane Popoff
• 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
  • Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Francesco Chicchiriccò
  • Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
  • Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
  • Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Francesco Chicchiriccò
  • Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
• 4.1.0 AnyDAO missing method findByDerAttrValue Stéphane Popoff
  • Re: 4.1.0 AnyDAO missing method findByDerAttrValue Francesco Chicchiriccò
• 4.1.0-M0 extends DefaultAnyObjectProvisioningManager access object new object Stéphane Popoff
• Exception loading custom MasterContent.xml 4.1.0-M0 Stéphane Popoff
• [ANN] Apache Syncope 4.0.5 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.1.0 Francesco Chicchiriccò
• 4.1.0-M2 FIT pom.xml docker configuration Stéphane Popoff
  • Re: 4.1.0-M2 FIT pom.xml docker configuration Francesco Chicchiriccò
  • Re: 4.1.0-M2 FIT pom.xml docker configuration Stéphane Popoff
• PostgreSql error when initializing database Stéphane Popoff
  • Re: PostgreSql error when initializing database Francesco Chicchiriccò
  • Re: PostgreSql error when initializing database Stéphane Popoff
• Removal of DynGroups and DynRealms Okon, Markus
  • Re: Removal of DynGroups and DynRealms Francesco Chicchiriccò
• RE: Re: Default administration account PAREIGE, Olivier via user
• Upgrade from Syncope 3 to Syncope 4 Lionel SCHWARZ
  • Re: Upgrade from Syncope 3 to Syncope 4 Francesco Chicchiriccò
  • Re: Upgrade from Syncope 3 to Syncope 4 Lionel SCHWARZ
  • Re: Upgrade from Syncope 3 to Syncope 4 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.1.0-M0 Francesco Chicchiriccò
• Black background in console since 4.0.4 PAREIGE, Olivier via user
  • Re: Black background in console since 4.0.4 Marco Di Sabatino Di Diodoro
  • RE: Black background in console since 4.0.4 PAREIGE, Olivier via user
  • Default administration account PAREIGE, Olivier via user
  • Re: Default administration account Lorenzo Di Cola
• CVE-2026-23795: Apache Syncope: Console XXE on Keymaster parameters Francesco Chicchiriccò
• CVE-2026-23794: Apache Syncope: Reflected XSS on Enduser Login Francesco Chicchiriccò
• [ANN] Apache Syncope 3.0.16 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.4 Francesco Chicchiriccò
• version 4.0.4-SNAPSHOT derived attribute in membership not evaluated Stéphane Popoff
  • Re: version 4.0.4-SNAPSHOT derived attribute in membership not evaluated Francesco Chicchiriccò
  • Re: version 4.0.4-SNAPSHOT derived attribute in membership not evaluated Stéphane Popoff
• question about Unique constraint in schema Lionel SCHWARZ
  • Re: question about Unique constraint in schema Alberto Bogi
• Help needed on error with FilteredResultsHandler Stéphane Popoff
  • Re: Help needed on error with FilteredResultsHandler Lorenzo Di Cola
  • Re: Help needed on error with FilteredResultsHandler Stéphane Popoff
  • Re: Help needed on error with FilteredResultsHandler Lorenzo Di Cola
  • Re: Help needed on error with FilteredResultsHandler Stéphane Popoff
  • Re: Help needed on error with FilteredResultsHandler Lorenzo Di Cola
• Realms Group GUI errors Stéphane Popoff
  • Re: Realms Group GUI errors Francesco Chicchiriccò
  • Re: Realms Group GUI errors Stéphane Popoff
  • Re: Realms Group GUI errors Francesco Chicchiriccò
  • Re: Realms Group GUI errors Stéphane Popoff
  • Re: Realms Group GUI errors Francesco Chicchiriccò
• Error when loading second REST connector Stéphane Popoff
  • Re: Error when loading second REST connector Francesco Chicchiriccò
  • Re: Error when loading second REST connector Stéphane Popoff
• Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
  • Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
  • Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
  • Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
  • Re: Object persistence operation in ProvisioningManager or Workflow Lankinen, Antti G
  • Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
  • Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
  • Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
  • Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
  • Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
  • Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
  • Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
  • Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• Logic:update not properly audited Lionel SCHWARZ
  • Re: Logic:update not properly audited Francesco Chicchiriccò
  • Re: Logic:update not properly audited Lionel SCHWARZ
  • Re: Logic:update not properly audited Lionel SCHWARZ
  • Re: Logic:update not properly audited Lionel SCHWARZ
  • Re: Logic:update not properly audited Lionel SCHWARZ
• Possible bug in Dynamic Groups behavior on Syncope JIN, XIAOFAN via user
  • Re: Possible bug in Dynamic Groups behavior on Syncope Francesco Chicchiriccò
  • RE: Possible bug in Dynamic Groups behavior on Syncope JIN, XIAOFAN via user
• CVE-2025-65998: Apache Syncope: Default AES key used for internal password encryption Francesco Chicchiriccò
• [ANN] Apache Syncope 3.0.15 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.3 Francesco Chicchiriccò
• CVE-2025-57738: Apache Syncope: Remote Code Execution by delegated administrators Francesco Chicchiriccò
• [ANN] Apache Syncope 3.0.14 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.2 Francesco Chicchiriccò
• [WARNING] Syncope Demo temporarily unavailable Francesco Chicchiriccò
  • Re: [WARNING] Syncope Demo temporarily unavailable Francesco Chicchiriccò
• Update in DefaultUserProvisioningManager not transactional? Feder, Stephan
  • Re: Update in DefaultUserProvisioningManager not transactional? Francesco Chicchiriccò
  • Re: Update in DefaultUserProvisioningManager not transactional? Francesco Chicchiriccò
  • Re: Update in DefaultUserProvisioningManager not transactional? Feder, Stephan
  • Re: Update in DefaultUserProvisioningManager not transactional? Francesco Chicchiriccò
  • Re: Update in DefaultUserProvisioningManager not transactional? Feder, Stephan
• case sensitivity in opensearch Bergmann, Clemens
  • Re: case sensitivity in opensearch Francesco Chicchiriccò
• LDAP Connector always writing all Attributes Bergmann, Clemens
  • Re: LDAP Connector always writing all Attributes Francesco Chicchiriccò
  • RE: LDAP Connector always writing all Attributes Bergmann, Clemens
• active notification Lionel SCHWARZ
• Unable to login to console as admin Lionel SCHWARZ
  • Re: Unable to login to console as admin Marco Di Sabatino Di Diodoro
  • Re: Unable to login to console as admin Lionel SCHWARZ
  • Re: Unable to login to console as admin Francesco Chicchiriccò
  • Re: Unable to login to console as admin Lionel SCHWARZ
  • Re: Unable to login to console as admin Francesco Chicchiriccò
  • Re: Unable to login to console as admin Lionel SCHWARZ
  • Re: Unable to login to console as admin Francesco Chicchiriccò
• [ANN] Apache Syncope 3.0.13 Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.1 Francesco Chicchiriccò
• ReportingSQLException on anySearchDAO.count() Lionel SCHWARZ
  • Re: ReportingSQLException on anySearchDAO.count() Francesco Chicchiriccò
  • Re: ReportingSQLException on anySearchDAO.count() Lionel SCHWARZ
• "dataType" is null / PlainSchemaDAO.find() Feder, Stephan
  • Re: "dataType" is null / PlainSchemaDAO.find() Francesco Chicchiriccò
  • Re: "dataType" is null / PlainSchemaDAO.find() Feder, Stephan
  • RE: "dataType" is null / PlainSchemaDAO.find() Bergmann, Clemens
• [ANN] Apache Syncope 4.0.0 Francesco Chicchiriccò
• [ANN] Apache Syncope 3.0.12 Francesco Chicchiriccò
• having all relationships with AnySearchDAO.search() Lionel SCHWARZ
  • Re: having all relationships with AnySearchDAO.search() Francesco Chicchiriccò
• Email notification task not executed Michele Andreoli
  • Re: Email notification task not executed Francesco Chicchiriccò
• notification for a specific AnyObjet type Lionel SCHWARZ
  • Re: notification for a specific AnyObjet type Francesco Chicchiriccò
• Issue with UNIQUE attribute with 2 entries in the database Lionel SCHWARZ
  • Re: Issue with UNIQUE attribute with 2 entries in the database Lionel SCHWARZ
  • Re: Issue with UNIQUE attribute with 2 entries in the database Francesco Chicchiriccò
• Session management in clustered setup Bergmann, Clemens
  • Re: Session management in clustered setup Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.0-M1 Francesco Chicchiriccò
• [ANN] Apache Syncope 3.0.11 Francesco Chicchiriccò
• [ANN] Demo is now based on Syncope 4.0 Francesco Chicchiriccò
• login workflow Mukeya Kassindye
  • Re: login workflow Francesco Chicchiriccò
  • Re: login workflow Mukeya Kassindye
• Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Mukeya Kassindye
  • Re: Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Francesco Chicchiriccò
  • Re: Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Mukeya Kassindye
  • Re: Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Francesco Chicchiriccò
• Conditional propagation Feder, Stephan
  • Re: Conditional propagation Francesco Chicchiriccò
• [ANN] Apache Syncope 4.0.0-M0 Francesco Chicchiriccò

• Earlier messages