Shibboleth XMLTooling 3.2.3

CPE Details

Shibboleth XMLTooling 3.2.3
shibboleth
xmltooling
3.2.3
2023-07-06
12h00 +00:00
2023-07-07
10h00 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:shibboleth:xmltooling:3.2.3:*:*:*:*:*:*:*

Informations

Vendor

shibboleth

Product

xmltooling

Version

3.2.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-36661 2023-06-24 22h00 +00:00 Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
7.5
High