Shibboleth XMLTooling 3.0.1

CPE Details

Shibboleth XMLTooling 3.0.1
shibboleth
xmltooling
3.0.1
2023-07-06
12h00 +00:00
2023-07-07
10h00 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:shibboleth:xmltooling:3.0.1:*:*:*:*:*:*:*

Informations

Vendor

shibboleth

Product

xmltooling

Version

3.0.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-36661 2023-06-24 22h00 +00:00 Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
7.5
High