SCIMono before 0.0.19 is vulnerable to remote code execution because it is possible for an attacker to inject and execute java expressions and compromise the availability and integrity of the system.
View the template here CVE-2021-21479.yaml
References:
https://github.com/ARPSyndicate/cvemon