CVE-2024-3319

—

CVSS 3.1

9.1 critical

EPSS

<1%p54

Published

May 15, 2024 (May 15, 2024)

Modified

Jun 17, 2026

Description

An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.

Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.