CVE-2025-57738— Apache Syncope: Remote Code Execution by delegated administrators
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-57738
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Apache Syncope: Remote Code Execution by delegated administrators
Source: NVD (National Vulnerability Database)
Vulnerability Description
Apache Syncope offers the ability to extend / customize the base behavior on every deployment by allowing to provide custom implementations of a few Java interfaces; such implementations can be provided either as Java or Groovy classes, with the latter being particularly attractive as the machinery is set for runtime reload. Such a feature has been available for a while, but recently it was discovered that a malicious administrator can inject Groovy code that can be executed remotely by a running Apache Syncope Core instance. Users are recommended to upgrade to version 3.0.14 / 4.0.2, which fix this issue by forcing the Groovy code to run in a sandbox.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
不充分的划分
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache Syncope 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Syncope是美国阿帕奇（Apache）基金会的一套用于企业环境中的开源数字身份管理系统。该系统支持身份管理、角色配置等。 Apache Syncope 3.0.14版本和4.0.2版本存在安全漏洞，该漏洞源于恶意管理员可注入Groovy代码，可能导致远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Syncope | 2.1 ~ 2.1.14 | - |
II. Public POCs for CVE-2025-57738
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-57738
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Apache Syncope
- CVE-2026-23794
Apache Syncope: Reflected XSS on Enduser Login - CVE-2026-23795
Apache Syncope: Console XXE on Keymaster parameters - CVE-2025-65998
Apache Syncope: Default AES key used for internal password e - CVE-2024-45031
Apache Syncope: Stored XSS in Console and Enduser - CVE-2024-38503
Apache Syncope: HTML tags can be injected into Console or En
Same vendor: Apache Software Foundation
- CVE-2026-39816
Apache NiFi: Missing Execute Code Required Permission on Tin - CVE-2026-25199
Apache CloudStack: Proxmox Extension Allows Unauthorized Cro - CVE-2026-25077
Apache CloudStack: Unauthenticated Command Injection in Dire - CVE-2025-69233
Apache CloudStack: Domain/account resources limits not honor - CVE-2025-66467
Apache CloudStack: MinIO policy remains intact on bucket del
Same weakness: CWE-653
- CVE-2026-40968
Spring gRPC SecurityContext leaks across requests on authori - CVE-2026-5600
pretix 安全漏洞 - CVE-2026-5599
API allows deletion of users of other instance - CVE-2026-34775
Electron: nodeIntegrationInWorker not correctly scoped in sh - CVE-2026-4282
Keycloak: keycloak: privilege escalation via forged authoriz
V. Comments for CVE-2025-57738
No comments yet