Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-06-25T00:00:00
Updated: 2024-08-02T16:52:54.047Z
Reserved: 2023-06-25T00:00:00
Link: CVE-2023-36661
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-06-25T22:15:21.403
Modified: 2024-11-21T08:10:15.000
Link: CVE-2023-36661
Redhat