Java Expression Injection Vulnerability in SCIMono before 0.0.19

CVE-2021-21479 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.

Learn more about our Web Application Penetration Testing UK.