user  

Messages by Date

• 2026/11/02 CVE-2026-114364: Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search Francesco Chicchiriccò via user
• 2026/11/02 CVE-2026-109083: Apache Syncope: Remote Code Execution via Flowable JUEL expression Francesco Chicchiriccò via user
• 2026/11/02 CVE-2026-113511: Apache Syncope: Delegated administration boundaries can be bypassed for Realm update Francesco Chicchiriccò via user
• 2026/11/02 CVE-2026-113687: Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass Francesco Chicchiriccò via user
• 2026/11/02 CVE-2026-110535: Apache Syncope: AuthProfile value escalation via self-service update Francesco Chicchiriccò via user
• 2026/11/02 [ANN] Apache Syncope 4.1.4 Francesco Chicchiriccò via user
• 2026/11/02 [ANN] Apache Syncope 4.0.9 Francesco Chicchiriccò via user
• 2026/10/15 AW: Notification tasks not executed (fixed) Okon, Markus
• 2026/10/13 Errors when searching for users Feder, Stephan
• 2026/10/13 Re: Notification tasks not executed (fixed) Lionel SCHWARZ
• 2026/10/13 Notification tasks not executed Lionel SCHWARZ
• 2026/09/17 Re: [ANN] Apache Syncope 4.0.8 Lionel SCHWARZ
• 2026/09/17 Re: [ANN] Apache Syncope 4.0.8 Francesco Chicchiriccò
• 2026/09/17 Re: [ANN] Apache Syncope 4.0.8 Lionel SCHWARZ
• 2026/09/14 CVE-2026-73236: Apache Syncope: Cross-Realm authorization bypass in delegated administration Francesco Chicchiriccò
• 2026/09/14 CVE-2026-78318: Apache Syncope: Unauthenticated reflected XSS in Console and Enduser Francesco Chicchiriccò
• 2026/09/14 CVE-2026-73579: Apache Syncope: Non-recursive Any search could skip Realms restrictions Francesco Chicchiriccò
• 2026/09/14 CVE-2026-87779: Apache Syncope: AES Secret Key disclosure via log output Francesco Chicchiriccò
• 2026/09/14 CVE-2026-78330: Apache Syncope: Privilege escalation for admin user via JWT authentication Francesco Chicchiriccò
• 2026/09/14 CVE-2026-77147: Apache Syncope: Groovy Sandbox escape for empty CommandArgs Francesco Chicchiriccò
• 2026/09/14 CVE-2026-73195: Apache Syncope: CSV export spreadsheet formula injection Francesco Chicchiriccò
• 2026/09/14 CVE-2026-73668: Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values Francesco Chicchiriccò
• 2026/09/14 CVE-2026-75030: Apache Syncope: Incomplete authorization checks for Group members deprovisioning Francesco Chicchiriccò
• 2026/09/14 CVE-2026-77181: Apache Syncope: ClientApp update entitlement not effective Francesco Chicchiriccò
• 2026/09/14 CVE-2026-87802: Apache Syncope: SRA OAuth2 JWT signature verification bypass Francesco Chicchiriccò
• 2026/09/14 CVE-2026-87785: Apache Syncope: JWT subject spoofing Francesco Chicchiriccò
• 2026/09/14 CVE-2026-86460: Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence Francesco Chicchiriccò
• 2026/09/14 CVE-2026-82232: Apache Syncope: SQL injection via sort parameter in Task search Francesco Chicchiriccò
• 2026/09/14 CVE-2026-78336: Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user Francesco Chicchiriccò
• 2026/09/14 CVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist Francesco Chicchiriccò
• 2026/09/14 CVE-2026-77051: Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search Francesco Chicchiriccò
• 2026/09/14 CVE-2026-75015: Apache Syncope: Nested secrets leak cleartext into audit records readable Francesco Chicchiriccò
• 2026/09/14 CVE-2026-73470: Apache Syncope: Delegating users can grant unowned Roles Francesco Chicchiriccò
• 2026/09/14 CVE-2026-73178: Apache Syncope: JWT Access Token takeover Francesco Chicchiriccò
• 2026/09/14 CVE-2026-73370: Apache Syncope: Cross-Realm boundaries reconciliation bypass Francesco Chicchiriccò
• 2026/09/14 CVE-2026-73191: Apache Syncope: CAS service URL injection via Forwarded HTTP headers Francesco Chicchiriccò
• 2026/09/14 [ANN] Apache Syncope 4.0.8 Francesco Chicchiriccò
• 2026/09/14 [ANN] Apache Syncope 4.1.3 Francesco Chicchiriccò
• 2026/07/20 [ANN] Apache Syncope 4.0.7 Francesco Chicchiriccò
• 2026/07/20 CVE-2026-63071: Apache Syncope: RCE via Groovy Sandbox bypass Francesco Chicchiriccò
• 2026/07/20 CVE-2026-62418: Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check Francesco Chicchiriccò
• 2026/07/20 CVE-2026-62183: Apache Syncope: User self-service privilege escalation Francesco Chicchiriccò
• 2026/07/20 CVE-2026-57308: Apache Syncope: SQL injection vulnerability in Audit Events search Francesco Chicchiriccò
• 2026/07/20 CVE-2026-53421: Apache Syncope: Remote Code Execution via Scripted Connector Francesco Chicchiriccò
• 2026/07/20 CVE-2026-53405: Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask Francesco Chicchiriccò
• 2026/07/20 [ANN] Apache Syncope 4.0.7 Francesco Chicchiriccò
• 2026/07/20 [ANN] Apache Syncope 4.1.2 Francesco Chicchiriccò
• 2026/06/15 Re: GenericPersistence:ReportingSQLException relation dynrolemembers does not exist Lionel SCHWARZ
• 2026/06/15 Re: GenericPersistence:ReportingSQLException relation dynrolemembers does not exist Lionel SCHWARZ
• 2026/06/15 GenericPersistence:ReportingSQLException relation dynrolemembers does not exist Lionel SCHWARZ
• 2026/05/25 CVE-2026-42797: Apache Syncope: JexlContextBuilder Information Disclosure Francesco Chicchiriccò
• 2026/05/25 CVE-2026-42782: Apache Syncope: Post-auth RCE via Groovy static Francesco Chicchiriccò
• 2026/05/25 [ANN] Apache Syncope 4.0.6 Francesco Chicchiriccò
• 2026/05/25 [ANN] Apache Syncope 4.1.1 Francesco Chicchiriccò
• 2026/04/25 Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Stéphane Popoff
• 2026/04/24 Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Francesco Chicchiriccò
• 2026/04/24 Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Andrea Patricelli
• 2026/04/20 Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Stéphane Popoff
• 2026/04/20 Re: spring AutoConfigurationClass.getAnnotationMetadata neo4j Andrea Patricelli
• 2026/04/16 spring AutoConfigurationClass.getAnnotationMetadata neo4j Stéphane Popoff
• 2026/04/15 Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
• 2026/04/15 Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Francesco Chicchiriccò
• 2026/04/15 Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
• 2026/04/15 Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
• 2026/04/15 Re: 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Francesco Chicchiriccò
• 2026/04/15 4.1.0 ProvisioningContext bean anyTypeClassDataBinder can't match constructor of AnyObjectDataBinderImpl Stéphane Popoff
• 2026/04/14 Re: 4.1.0 AnyDAO missing method findByDerAttrValue Francesco Chicchiriccò
• 2026/04/14 4.1.0 AnyDAO missing method findByDerAttrValue Stéphane Popoff
• 2026/04/08 4.1.0-M0 extends DefaultAnyObjectProvisioningManager access object new object Stéphane Popoff
• 2026/04/07 Exception loading custom MasterContent.xml 4.1.0-M0 Stéphane Popoff
• 2026/04/03 [ANN] Apache Syncope 4.0.5 Francesco Chicchiriccò
• 2026/04/03 [ANN] Apache Syncope 4.1.0 Francesco Chicchiriccò
• 2026/04/03 Re: 4.1.0-M2 FIT pom.xml docker configuration Stéphane Popoff
• 2026/04/02 Re: 4.1.0-M2 FIT pom.xml docker configuration Francesco Chicchiriccò
• 2026/04/02 4.1.0-M2 FIT pom.xml docker configuration Stéphane Popoff
• 2026/03/31 Re: PostgreSql error when initializing database Stéphane Popoff
• 2026/03/31 Re: PostgreSql error when initializing database Francesco Chicchiriccò
• 2026/03/31 PostgreSql error when initializing database Stéphane Popoff
• 2026/03/17 Re: Upgrade from Syncope 3 to Syncope 4 Francesco Chicchiriccò
• 2026/03/17 Re: Removal of DynGroups and DynRealms Francesco Chicchiriccò
• 2026/03/16 Removal of DynGroups and DynRealms Okon, Markus
• 2026/03/12 Re: Upgrade from Syncope 3 to Syncope 4 Lionel SCHWARZ
• 2026/03/11 Re: Upgrade from Syncope 3 to Syncope 4 Francesco Chicchiriccò
• 2026/03/10 RE: Re: Default administration account PAREIGE, Olivier via user
• 2026/03/10 Upgrade from Syncope 3 to Syncope 4 Lionel SCHWARZ
• 2026/03/06 Re: Default administration account Lorenzo Di Cola
• 2026/03/06 Default administration account PAREIGE, Olivier via user
• 2026/02/22 [ANN] Apache Syncope 4.1.0-M0 Francesco Chicchiriccò
• 2026/02/13 RE: Black background in console since 4.0.4 PAREIGE, Olivier via user
• 2026/02/10 Re: Black background in console since 4.0.4 Marco Di Sabatino Di Diodoro
• 2026/02/10 Black background in console since 4.0.4 PAREIGE, Olivier via user
• 2026/02/05 Re: Logic:update not properly audited Lionel SCHWARZ
• 2026/02/02 CVE-2026-23795: Apache Syncope: Console XXE on Keymaster parameters Francesco Chicchiriccò
• 2026/02/02 CVE-2026-23794: Apache Syncope: Reflected XSS on Enduser Login Francesco Chicchiriccò
• 2026/02/02 [ANN] Apache Syncope 3.0.16 Francesco Chicchiriccò
• 2026/02/02 [ANN] Apache Syncope 4.0.4 Francesco Chicchiriccò
• 2026/02/02 Re: Logic:update not properly audited Lionel SCHWARZ
• 2026/01/29 Re: version 4.0.4-SNAPSHOT derived attribute in membership not evaluated Stéphane Popoff
• 2026/01/28 Re: version 4.0.4-SNAPSHOT derived attribute in membership not evaluated Francesco Chicchiriccò
• 2026/01/28 version 4.0.4-SNAPSHOT derived attribute in membership not evaluated Stéphane Popoff
• 2026/01/27 Re: Logic:update not properly audited Lionel SCHWARZ
• 2026/01/22 Re: Help needed on error with FilteredResultsHandler Lorenzo Di Cola
• 2026/01/22 Re: question about Unique constraint in schema Alberto Bogi
• 2026/01/22 Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• 2026/01/22 question about Unique constraint in schema Lionel SCHWARZ
• 2026/01/22 Re: Help needed on error with FilteredResultsHandler Stéphane Popoff
• 2026/01/21 Re: Help needed on error with FilteredResultsHandler Lorenzo Di Cola
• 2026/01/20 Re: Help needed on error with FilteredResultsHandler Stéphane Popoff
• 2026/01/20 Re: Help needed on error with FilteredResultsHandler Lorenzo Di Cola
• 2026/01/17 Help needed on error with FilteredResultsHandler Stéphane Popoff
• 2026/01/15 Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• 2026/01/15 Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
• 2026/01/15 Re: Realms Group GUI errors Stéphane Popoff
• 2026/01/15 Re: Realms Group GUI errors Francesco Chicchiriccò
• 2026/01/15 Re: Realms Group GUI errors Francesco Chicchiriccò
• 2026/01/15 Re: Realms Group GUI errors Stéphane Popoff
• 2026/01/15 Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
• 2026/01/14 Re: Realms Group GUI errors Francesco Chicchiriccò
• 2026/01/14 Realms Group GUI errors Stéphane Popoff
• 2026/01/14 Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• 2026/01/13 Re: Error when loading second REST connector Stéphane Popoff
• 2026/01/12 Re: Error when loading second REST connector Francesco Chicchiriccò
• 2026/01/12 Error when loading second REST connector Stéphane Popoff
• 2026/01/09 Re: Logic:update not properly audited Lionel SCHWARZ
• 2026/01/08 Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
• 2026/01/08 Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• 2026/01/07 Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
• 2026/01/07 Re: Object persistence operation in ProvisioningManager or Workflow Lankinen, Antti G
• 2026/01/07 Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• 2025/12/31 Re: Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• 2025/12/30 Re: Object persistence operation in ProvisioningManager or Workflow Francesco Chicchiriccò
• 2025/12/30 Re: Logic:update not properly audited Francesco Chicchiriccò
• 2025/12/30 Object persistence operation in ProvisioningManager or Workflow Stéphane Popoff
• 2025/12/22 Logic:update not properly audited Lionel SCHWARZ
• 2025/11/27 RE: Possible bug in Dynamic Groups behavior on Syncope JIN, XIAOFAN via user
• 2025/11/26 Re: Possible bug in Dynamic Groups behavior on Syncope Francesco Chicchiriccò
• 2025/11/25 Possible bug in Dynamic Groups behavior on Syncope JIN, XIAOFAN via user
• 2025/11/24 CVE-2025-65998: Apache Syncope: Default AES key used for internal password encryption Francesco Chicchiriccò
• 2025/11/24 [ANN] Apache Syncope 3.0.15 Francesco Chicchiriccò
• 2025/11/24 [ANN] Apache Syncope 4.0.3 Francesco Chicchiriccò
• 2025/10/22 Re: [WARNING] Syncope Demo temporarily unavailable Francesco Chicchiriccò
• 2025/10/20 CVE-2025-57738: Apache Syncope: Remote Code Execution by delegated administrators Francesco Chicchiriccò
• 2025/10/20 [ANN] Apache Syncope 3.0.14 Francesco Chicchiriccò
• 2025/10/20 [ANN] Apache Syncope 4.0.2 Francesco Chicchiriccò
• 2025/10/20 Re: Update in DefaultUserProvisioningManager not transactional? Feder, Stephan
• 2025/10/20 Re: Update in DefaultUserProvisioningManager not transactional? Francesco Chicchiriccò
• 2025/10/20 Re: Update in DefaultUserProvisioningManager not transactional? Feder, Stephan
• 2025/10/19 Re: Update in DefaultUserProvisioningManager not transactional? Francesco Chicchiriccò
• 2025/10/19 Re: Update in DefaultUserProvisioningManager not transactional? Francesco Chicchiriccò
• 2025/10/17 [WARNING] Syncope Demo temporarily unavailable Francesco Chicchiriccò
• 2025/10/17 Update in DefaultUserProvisioningManager not transactional? Feder, Stephan
• 2025/09/17 case sensitivity in opensearch Bergmann, Clemens
• 2025/09/11 Re: case sensitivity in opensearch Francesco Chicchiriccò
• 2025/09/07 RE: LDAP Connector always writing all Attributes Bergmann, Clemens
• 2025/09/06 LDAP Connector always writing all Attributes Bergmann, Clemens
• 2025/09/06 Re: LDAP Connector always writing all Attributes Francesco Chicchiriccò
• 2025/09/05 active notification Lionel SCHWARZ
• 2025/09/01 Re: Unable to login to console as admin Francesco Chicchiriccò
• 2025/09/01 Re: Unable to login to console as admin Lionel SCHWARZ
• 2025/08/29 Re: Unable to login to console as admin Francesco Chicchiriccò
• 2025/08/28 Re: Unable to login to console as admin Lionel SCHWARZ
• 2025/08/28 Re: Unable to login to console as admin Francesco Chicchiriccò
• 2025/08/28 Re: Unable to login to console as admin Lionel SCHWARZ
• 2025/08/27 Re: Unable to login to console as admin Marco Di Sabatino Di Diodoro
• 2025/08/26 Unable to login to console as admin Lionel SCHWARZ
• 2025/08/11 [ANN] Apache Syncope 3.0.13 Francesco Chicchiriccò
• 2025/08/11 [ANN] Apache Syncope 4.0.1 Francesco Chicchiriccò
• 2025/08/03 RE: "dataType" is null / PlainSchemaDAO.find() Bergmann, Clemens
• 2025/07/03 Re: ReportingSQLException on anySearchDAO.count() Lionel SCHWARZ
• 2025/07/03 Re: ReportingSQLException on anySearchDAO.count() Francesco Chicchiriccò
• 2025/07/01 ReportingSQLException on anySearchDAO.count() Lionel SCHWARZ
• 2025/06/17 Re: "dataType" is null / PlainSchemaDAO.find() Feder, Stephan
• 2025/06/16 Re: "dataType" is null / PlainSchemaDAO.find() Francesco Chicchiriccò
• 2025/06/11 "dataType" is null / PlainSchemaDAO.find() Feder, Stephan
• 2025/05/27 [ANN] Apache Syncope 4.0.0 Francesco Chicchiriccò
• 2025/05/27 [ANN] Apache Syncope 3.0.12 Francesco Chicchiriccò
• 2025/05/21 Re: having all relationships with AnySearchDAO.search() Francesco Chicchiriccò
• 2025/05/20 having all relationships with AnySearchDAO.search() Lionel SCHWARZ
• 2025/05/07 Re: Email notification task not executed Francesco Chicchiriccò
• 2025/05/07 Email notification task not executed Michele Andreoli
• 2025/05/07 RE: Task Notification Email with username empty Michele Andreoli
• 2025/03/26 Re: notification for a specific AnyObjet type Francesco Chicchiriccò
• 2025/03/25 notification for a specific AnyObjet type Lionel SCHWARZ
• 2025/03/24 Re: Issue with UNIQUE attribute with 2 entries in the database Francesco Chicchiriccò
• 2025/03/24 Re: Issue with UNIQUE attribute with 2 entries in the database Lionel SCHWARZ
• 2025/03/18 Issue with UNIQUE attribute with 2 entries in the database Lionel SCHWARZ
• 2025/03/18 Re: Session management in clustered setup Francesco Chicchiriccò
• 2025/03/17 Session management in clustered setup Bergmann, Clemens
• 2025/03/11 [ANN] Apache Syncope 4.0.0-M1 Francesco Chicchiriccò
• 2025/03/11 [ANN] Apache Syncope 3.0.11 Francesco Chicchiriccò
• 2025/02/22 [ANN] Demo is now based on Syncope 4.0 Francesco Chicchiriccò
• 2025/02/16 Re: login workflow Mukeya Kassindye
• 2025/02/13 Re: login workflow Francesco Chicchiriccò
• 2025/02/12 login workflow Mukeya Kassindye
• 2025/01/30 Re: Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Francesco Chicchiriccò
• 2025/01/30 Re: Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Mukeya Kassindye
• 2025/01/30 Re: Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Francesco Chicchiriccò
• 2025/01/30 Issue with Syncope - core 3.0.10 on WildFly – Failed to load API definition Mukeya Kassindye
• 2025/01/16 Re: Conditional propagation Francesco Chicchiriccò
• 2025/01/15 Conditional propagation Feder, Stephan

• Earlier messages