Описание
This affects all versions <0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures.
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:gosaml2_project:gosaml2:*:*:*:*:*:*:*:*
EPSS
Процентиль: 69%
0.00604
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-476
Связанные уязвимости
CVSS3: 7.5
debian
почти 5 лет назад
This affects all versions <0.7.0 of package github.com/russellhaering/ ...
CVSS3: 7.5
github
около 3 лет назад
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
EPSS
Процентиль: 69%
0.00604
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-476