Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j522-236p-wx5g

Опубликовано: 26 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

EPSS

Процентиль: 98%
0.60666
Средний

7.5 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

redhat
больше 2 лет назад

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

CVSS3: 7.5
nvd
больше 2 лет назад

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

CVSS3: 7.5
debian
больше 2 лет назад

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth ...

suse-cvrf
больше 2 лет назад

Security update for xmltooling

EPSS

Процентиль: 98%
0.60666
Средний

7.5 High

CVSS3

Дефекты

CWE-918