description: An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.
problem types: Remote code execution
affected:
{
product: Apache Syncope
vendor: Apache Software Foundation
versions:
status: affected, version: Apache Syncope releases prior to 2.0.11 and 2.1.2
}