org.apache.syncope.ext.oidcc4ui:syncope-ext-oidcc4ui-logic vulnerabilities

CVEs whose affected-version data names the org.apache.syncope.ext.oidcc4ui:syncope-ext-oidcc4ui-logic package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-78336High· 7.5

1w ago

Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated user can query for the list of available OIDC providers configured for SSO with Console and Enduser

Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated user can query for the list of available OIDC providers configured for SSO with Console and Enduser. The returned payload contains al…

▾ TwilightApache Software Foundation · org.apache.syncope.ext.oidcc4ui:syncope-ext-oidcc4ui-logicEPSS 0.41%via NVD