https://blog.securelayer7.net/cve-2025-57738-apache-syncope-groovy-rce/
CVE-2025-57738: Apache Syncope Groovy Injection RCE
Apr 20, 2026 - CVE-2025-57738 in Apache Syncope enables RCE via Groovy code injection. Learn impact, exploit flow, root cause, and patch details
apache syncopecvegroovyinjectionrce
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/common/validation/AnyObjectValidator.html
AnyObjectValidator (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.persistence.common.validation, class: AnyObjectValidator
apache syncopeapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/api/entity/group/package-summary.html
org.apache.syncope.core.persistence.api.entity.group (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.persistence.api.entity.group
apache syncopecorepersistence
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/neo4j/entity/Neo4jConnInstance.html
Neo4jConnInstance (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.persistence.neo4j.entity, class: Neo4jConnInstance
apache syncopeapi
https://iasu.infocamere.it/syncope-wa/login?service=https%3A%2F%2Fiasu.infocamere.it%2Fsyncope-wa%2Foauth2.0%2FcallbackAuthorize%3Fclient_id%3Dic.suap.old%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fsuap.impresainungiorno.gov.it%252Ffnsuap%252Fcmd%252Fcreate%253Fcomune%253DB735%26response_type%3Dcode%26response_mode%3Dquery%26state%3D69f239b8-e6bc-4cdb-8b64-194fb0471d4d%26nonce%3De9db0b84-74c8-43f3-aad6-dffe351047bb%26client_name%3DCasOAuthClient
Apache Syncope Login
apache syncope
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/ext/scimv2/api/data/Value.html
Value (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.ext.scimv2.api.data, class: Value
apache syncopevalueapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/jpa/entity/policy/JPAAccessPolicy.html
JPAAccessPolicy (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.persistence.jpa.entity.policy, class: JPAAccessPolicy
apache syncopeapi
https://iasu.infocamere.it/syncope-wa/login?service=https%3A%2F%2Fiasu.infocamere.it%2Fsyncope-wa%2Foauth2.0%2FcallbackAuthorize%3Fclient_id%3Dic.suap.old%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fsuap.impresainungiorno.gov.it%252Ffnsuap%252Fcmd%252Fcreate%253Fcomune%253DC750%26response_type%3Dcode%26response_mode%3Dquery%26state%3D87472ca5-a6e4-4702-b8b4-57427143cfd8%26nonce%3D7fd183db-e416-4719-ac66-2b7e40d14192%26client_name%3DCasOAuthClient
Apache Syncope Login
apache syncope
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/neo4j/entity/task/Neo4jInboundTask.html
Neo4jInboundTask (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.persistence.neo4j.entity.task, class: Neo4jInboundTask
apache syncopeapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/client/enduser/pages/SelfPasswordReset.SelfPwdResetPanel.html
SelfPasswordReset.SelfPwdResetPanel (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.client.enduser.pages, class: SelfPasswordReset, class: SelfPwdResetPanel
apache syncopeapi
https://www.tirasa.net/en/blog/apache-syncope-and-salesforce
Apache Syncope & Salesforce
This guide is a sequel of Syncope Basics: Manage SCIM v1.1 and explains how to configure the SCIM v1.1 ConnId Bundle to work with Salesforce.It will show how...
apache syncopesalesforce
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/common/lib/search/GroupFiqlSearchConditionBuilder.Builder.html
GroupFiqlSearchConditionBuilder.Builder (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.common.lib.search, class: GroupFiqlSearchConditionBuilder, class: Builder
apache syncopebuilderapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/common/dao/AbstractSearchDAO.CheckResult.html
AbstractSearchDAO.CheckResult (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.persistence.common.dao, class: AbstractSearchDAO, record: CheckResult
apache syncopeapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/provisioning/java/class-use/DefaultConnIdBundleManager.html
Uses of Class org.apache.syncope.core.provisioning.java.DefaultConnIdBundleManager (Apache Syncope...
use: package: org.apache.syncope.core.provisioning.java, class: DefaultConnIdBundleManager
apache syncopeusesclasscoreprovisioning
https://iasu.infocamere.it/syncope-wa/login?service=https%3A%2F%2Fiasu.infocamere.it%2Fsyncope-wa%2Foauth2.0%2FcallbackAuthorize%3Fclient_id%3Dic.suap.old%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fsuap.impresainungiorno.gov.it%252Ffnsuap%252Fcmd%252Fcreate%253Fcomune%253DF480%26response_type%3Dcode%26response_mode%3Dquery%26state%3Df41fdf2b-75eb-409b-b42d-88e81af4ddfa%26nonce%3Ddb71b77d-d485-4510-886c-d733610ad7e2%26client_name%3DCasOAuthClient
Apache Syncope Login
apache syncope
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/jpa/entity/task/class-use/JPALiveSyncTask.html
Uses of Class org.apache.syncope.core.persistence.jpa.entity.task.JPALiveSyncTask (Apache Syncope...
use: package: org.apache.syncope.core.persistence.jpa.entity.task, class: JPALiveSyncTask
apache syncope
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/common/validation/RealmValidator.html
RealmValidator (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.persistence.common.validation, class: RealmValidator
apache syncopeapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/common/lib/search/ConnObjectTOCompleteCondition.html
ConnObjectTOCompleteCondition (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.common.lib.search, interface: ConnObjectTOCompleteCondition
apache syncopeapi
https://iasu.infocamere.it/syncope-wa/login?service=https%3A%2F%2Fiasu.infocamere.it%2Fsyncope-wa%2Foauth2.0%2FcallbackAuthorize%3Fclient_id%3Dic.suap.old%26scope%3Dopenid%26redirect_uri%3Dhttps%253A%252F%252Fsuap.impresainungiorno.gov.it%252Ffnsuap%252Fcmd%252Fcreate%253Fcomune%253DF004%26response_type%3Dcode%26response_mode%3Dquery%26state%3Debbd8d25-a3c7-4f1b-b503-e4c073b7e369%26nonce%3D777c87c9-483f-4f06-b6ea-b51cf7fd6e91%26client_name%3DCasOAuthClient
Apache Syncope Login
apache syncope
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/provisioning/java/job/OpenFGAReinit.html
OpenFGAReinit (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.provisioning.java.job, class: OpenFGAReinit
apache syncopeapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/common/lib/attr/JDBCAttrRepoConf.QueryType.html
JDBCAttrRepoConf.QueryType (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.common.lib.attr, class: JDBCAttrRepoConf, enum: QueryType
apache syncopeapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/sra/security/oauth2/package-summary.html
org.apache.syncope.sra.security.oauth2 (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.sra.security.oauth2
apache syncopesrasecurityapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/provisioning/api/data/TaskDataBinder.html
TaskDataBinder (Apache Syncope 4.0.5 API)
declaration: package: org.apache.syncope.core.provisioning.api.data, interface: TaskDataBinder
apache syncopeapi
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/client/console/layout/class-use/AnyLayout.html
Uses of Class org.apache.syncope.client.console.layout.AnyLayout (Apache Syncope 4.0.5 API)
use: package: org.apache.syncope.client.console.layout, class: AnyLayout
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/common/keymaster/client/api/model/class-use/NetworkService.Type.html
Uses of Enum Class org.apache.syncope.common.keymaster.client.api.model.NetworkService.Type (Apache...
use: package: org.apache.syncope.common.keymaster.client.api.model, class: NetworkService, enum: Type
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/core/persistence/elasticsearch/dao/package-use.html
Uses of Package org.apache.syncope.core.persistence.elasticsearch.dao (Apache Syncope 4.0.5 API)
use: package: org.apache.syncope.core.persistence.elasticsearch.dao
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/common/lib/scim/package-use.html
Uses of Package org.apache.syncope.common.lib.scim (Apache Syncope 4.0.5 API)
use: package: org.apache.syncope.common.lib.scim
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/sra/security/cas/package-use.html
Uses of Package org.apache.syncope.sra.security.cas (Apache Syncope 4.0.5 API)
use: package: org.apache.syncope.sra.security.cas
https://syncope.apache.org/apidocs/4.0/org/apache/syncope/client/console/tasks/class-use/PullTaskDirectoryPanel.html
Uses of Class org.apache.syncope.client.console.tasks.PullTaskDirectoryPanel (Apache Syncope 4.0.5...
use: package: org.apache.syncope.client.console.tasks, class: PullTaskDirectoryPanel